Skip to content
W3 vulnerabilities
Newest
-
w3 css validator
There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request forgery (SSRF). This could be exploited to…
CVE-2025-1781
8.4 High
-
w3c online-spellchecker-py, w3 spell checker +1 more
w3c online-spellchecker-py spellchecker cross site scripting
CVE-2014-125108
3.1 Low
-
w3 webassembly
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.
CVE-2023-30300
Fix available
5.5 Medium
-
w3 unicorn
w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scripting
CVE-2021-4296
3.5 Low
-
boldgrid w3 total cache, w3 total cache +1 more
W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote...
CVE-2012-6079
7.5 High
-
boldgrid w3 total cache, w3 total cache +1 more
W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to...
CVE-2012-6078
7.5 High
-
boldgrid w3 total cache, w3 total cache +1 more
W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due...
CVE-2012-6077
7.5 High
-
epubcheck
EpubCheck 4.0.1 is vulnerable to external XML entity processing attacks
CVE-2016-9487
7.8 High
-
w3 high resolution time api
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that...
CVE-2017-5928
3.7 Low
-
w3 amaya
Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute...
CVE-2009-1209
Public exploit
EPSS 12.4%
9.3 High
-
w3 amaya
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote...
CVE-2009-0323
Public exploit
EPSS 62.5%
10.0 High