Vulnerabilities > W3

DATE CVE VULNERABILITY TITLE RISK
2023-12-23 CVE-2014-125108 Cross-site Scripting vulnerability in W3 Spell Checker
A vulnerability was found in w3c online-spellchecker-py up to 20140130.
network
low complexity
w3 CWE-79
6.1
2023-05-03 CVE-2023-30300 Infinite Loop vulnerability in W3 Webassembly 1.0
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.
local
low complexity
w3 CWE-835
5.5
2022-12-29 CVE-2021-4296 Cross-site Scripting vulnerability in W3 Unicorn
A vulnerability, which was classified as problematic, has been found in w3c Unicorn.
network
low complexity
w3 CWE-79
6.1
2018-07-13 CVE-2016-9487 XXE vulnerability in W3 Epubcheck 4.0.1
EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation.
network
w3 CWE-611
6.8
2017-02-27 CVE-2017-5928 Unspecified vulnerability in W3 High Resolution Time API
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.org/show_bug.cgi?id=1167489#c9 protection mechanism in place, which makes it easier for remote attackers to conduct AnC attacks via crafted JavaScript code.
network
w3
4.3
2009-04-01 CVE-2009-1209 Buffer Errors vulnerability in W3 Amaya 11.1
Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long defer attribute.
network
w3 CWE-119
critical
9.3
2009-01-28 CVE-2009-0323 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in W3 Amaya
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag, which is not properly handled by the ProcessStartGI function; and unspecified vectors in (3) html2thot.c and (4) xml2thot.c, related to the msgBuffer variable.
network
low complexity
w3 CWE-119
critical
10.0