<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: vilistextum</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-5657: Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.</title><link>https://patchthecve.com/cve/CVE-2006-5657.html</link><guid>https://patchthecve.com/cve/CVE-2006-5657.html</guid><pubDate>Tue, 16 Jun 2026 22:31:37 +0000</pubDate><description>HIGH 10.0: Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.</description></item><item><title>CVE-2006-5656: Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to ca</title><link>https://patchthecve.com/cve/CVE-2006-5656.html</link><guid>https://patchthecve.com/cve/CVE-2006-5656.html</guid><pubDate>Tue, 16 Jun 2026 22:31:37 +0000</pubDate><description>MEDIUM 5.0: Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the tmp_align variable.  NOTE: it is not clear whether this is a vulnerability, due to the functionality of th</description></item><item><title>CVE-2004-1299: Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute ar</title><link>https://patchthecve.com/cve/CVE-2004-1299.html</link><guid>https://patchthecve.com/cve/CVE-2004-1299.html</guid><pubDate>Tue, 16 Jun 2026 22:07:25 +0000</pubDate><description>HIGH 10.0: Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web page.</description></item></channel></rss>