CVE-2026-50571 | Medium | 5.7 | 2026-10-27 | WebSub is a W3C recommendation produced by the Social Web Working Group. In recommendation REC-websub-20180123, the intent-verification protocol requires a sub… |
CVE-2025-1781 | Medium | 6.5 | 2025-03-28 | There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request fo… |
CVE-2014-125108 | Low | 3.1 | 2023-12-23 | A vulnerability was found in w3c online-spellchecker-py up to 20140130. It has been rated as problematic. This issue affects some unknown processing of the fil… |
CVE-2021-4296 | Low | 3.5 | 2022-12-29 | A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c… |
CVE-2020-4070 | Medium | 4.6 | 2020-06-22 | In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs. A user would have to click on a specific… |
CVE-2008-6005 | | | 2009-01-28 | Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote att… |
CVE-2008-5282 | | | 2008-11-29 | Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribut… |
CVE-2006-1900 | | | 2006-04-20 | Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execu… |
CVE-2005-3183 | | | 2005-10-12 | The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafte… |
CVE-2004-2274 | | | 2004-12-31 | Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI. |
CVE-2002-1053 | | | 2002-10-04 | Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a… |
CVE-2002-1052 | | | 2002-10-04 | Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or… |
CVE-2002-1445 | | | 2002-08-12 | Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose… |
CVE-2000-0079 | | | 2000-01-18 | The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL. |