W3c vulnerabilities

Products

• Jigsaw 3
• Amaya Web Browser 2
• Cern Httpd 2
• Css Validator 2

Newest

• w3c websub WebSub: Reflected script execution through intent-verification challenges CVE-2026-50571 5.7 MediumOctober 27, 2026
• w3 css validator There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request forgery (SSRF). This could be exploited to… CVE-2025-1781 8.4 HighMarch 28, 2025
• w3c xml signature syntax and processing The W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was... CVE-2024-34581 7.3 HighJune 26, 2024
• w3c online-spellchecker-py, w3 spell checker +1 more w3c online-spellchecker-py spellchecker cross site scripting CVE-2014-125108 3.1 LowDecember 23, 2023
• w3 unicorn w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scripting CVE-2021-4296 3.5 LowDecember 29, 2022
• w3c css validator Cross-site Scripting in CSS Validator CVE-2020-4070 4.6 MediumJune 22, 2020
• w3c amaya web browser Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and... CVE-2008-6005 10.0 HighJanuary 28, 2009
• w3c amaya web browser Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to... CVE-2008-5282 Public exploit EPSS 17.6% 10.0 HighNovember 29, 2008
• w3c amaya Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other... CVE-2006-1900 Public exploit EPSS 16.9% 7.6 HighApril 20, 2006
• w3c libwww The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers... CVE-2005-3183 Fix available 4.3 MediumOctober 12, 2005
• w3c jigsaw Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly... CVE-2004-2274 6.4 MediumDecember 31, 2004
• w3c jigsaw Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote... CVE-2002-1053 6.8 MediumOctober 4, 2002
• w3c jigsaw Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP... CVE-2002-1052 5.0 MediumAugust 31, 2002
• w3c cern httpd Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute... CVE-2002-1445 Public exploit 4.3 MediumAugust 12, 2002
• w3c cern httpd The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some... CVE-2000-0079 7.5 HighJanuary 18, 2000