Skip to content
Noroxi

w3m records

5 published records for vendor w3m.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
80%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2006-6772
      38Monitor

      Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remo

      CriticalCVSS 9.3No exploitEPSS 4%

      w3m · w3mDec 27, 2006

    • CVE-2001-0700
      34Monitor

      Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header.

      HighCVSS 7.5Proof of conceptEPSS 12%

      w3m · w3mSep 20, 2001

    • CVE-2010-2074
      27Monitor

      istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain

      MediumCVSS 6.8No exploitEPSS 1%

      w3m · w3mJun 16, 2010

    • CVE-2002-1348
      21Monitor

      w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files

      MediumCVSS 5.0No exploitEPSS 2%

      w3m · w3mFeb 19, 2003

    • CVE-2002-1335
      18Monitor

      Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitr

      MediumCVSS 4.3No exploitEPSS 2%

      w3m · w3mDec 11, 2002