W3

11 CVEs across 8 W3 products. Browse W3 vulnerabilities, severities, and proof-of-concept exploits.

W3 products with known CVEs

ProductCVEs
Total Cache3
Amaya2
CSS Validator1
Epubcheck1
High Resolution Time API1
Spell Checker1
Unicorn1
Webassembly1
W3 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-1781Medium6.52025-03-28There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request fo…
CVE-2014-125108Low3.12023-12-23A vulnerability was found in w3c online-spellchecker-py up to 20140130. It has been rated as problematic. This issue affects some unknown processing of the fil…
CVE-2023-30300Medium5.52023-05-03An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.
CVE-2021-4296Low3.52022-12-29A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c…
CVE-2012-6079High7.52019-11-22W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.
CVE-2012-6078High7.52019-11-22W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.
CVE-2012-6077High7.52019-11-22W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.
CVE-2016-9487High7.82018-07-13EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation. An attacker who supplies a specially c…
CVE-2017-5928Low3.72017-02-27The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "T…
CVE-2009-12092009-04-01Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long defer attribute.
CVE-2009-03232009-01-28Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in…