Skip to content
Noroxi

w3c records

11 published records for vendor w3c.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
9.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

11 records
  • CVE-2008-5282
    45Plan

    Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    w3c · amaya web browserNov 28, 2008

  • CVE-2008-6005
    41Plan

    Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, mig

    CriticalCVSS 10.0No exploitEPSS 4%

    w3c · amaya web browserJan 28, 2009

  • CVE-2006-1900
    35Monitor

    Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote

    HighCVSS 7.6Proof of conceptEPSS 16%

    w3c · amayaApr 20, 2006

  • CVE-2000-0079
    31Monitor

    The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.

    HighCVSS 7.5No exploitEPSS 2%

    w3c · cern httpdJan 18, 2000

  • CVE-2024-34581
    29Monitor

    The W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was originally published with a "RetrievalMethod is

    HighCVSS 7.3No exploitEPSS 0%

    Jun 26, 2024

  • CVE-2002-1053
    28Monitor

    Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a U

    MediumCVSS 6.8No exploitEPSS 2%

    w3c · jigsawOct 4, 2002

  • CVE-2004-2274
    25Monitor

    Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI.

    MediumCVSS 6.4No exploitEPSS 1%

    w3c · jigsawDec 31, 2004

  • CVE-2002-1052
    21Monitor

    Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using t

    MediumCVSS 5.0No exploitEPSS 2%

    w3c · jigsawOct 4, 2002

  • CVE-2020-4070
    21Monitor

    Cross-site Scripting in CSS Validator

    MediumCVSS 5.4No exploitEPSS 0%

    w3c · css validatorJun 22, 2020

  • CVE-2002-1445
    18Monitor

    Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-e

    MediumCVSS 4.3Proof of conceptEPSS 3%

    w3c · cern httpdAug 12, 2002

  • CVE-2005-3183
    18Monitor

    The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation

    MediumCVSS 4.3No exploitEPSS 2%

    w3c · libwwwOct 12, 2005