Priority HIGH 76
There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request forgery (SSRF).
Vulnerabilities
11 records
TI-2014-08408 CVE-2014-125108 · GHSA-5868-pcx8-r4mq
w3c online-spellchecker-py spellchecker cross site scripting
Priority LOW 28
A vulnerability was found in w3c online-spellchecker-py up to 20140130.
TI-2023-14210 CVE-2023-30300 · GHSA-pm5m-2p5c-6mv8
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.
Priority MEDIUM 58
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.
TI-2021-03154 CVE-2021-4296 · GHSA-9cgm-gf5x-jx5x
w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scripting
Priority LOW 28
A vulnerability, which was classified as problematic, has been found in w3c Unicorn.
TI-2012-05043 CVE-2012-6079 · GHSA-cxp7-rf23-r7xf
Information disclosure in W3 Total Cache
Priority LOW 37
W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.
TI-2012-05042 CVE-2012-6078 · GHSA-pmq6-p5mj-fpqq
Information disclosure in W3 Total Cache
Priority LOW 37
W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.
TI-2012-05041 CVE-2012-6077 · GHSA-624v-rq3v-wr69
Information disclosure in W3 Total Cache
Priority LOW 37
W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.
TI-2016-07753 CVE-2016-9487 · GHSA-vvh2-g87v-gg7j
EpubCheck 4.0.1 is vulnerable to external XML entity processing attacks
Priority LOW 37
EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation.
TI-2017-03848 CVE-2017-5928 · GHSA-3m9f-698w-3mf8
The W3C High Resolution Time API, as implemented in various web browsers, does not…
Priority LOW 21
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.…
TI-2009-01145 CVE-2009-1209 · GHSA-c3hc-w4pf-h2v7
Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to…
Priority MEDIUM 54
Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long defer attribute.
TI-2009-00303 CVE-2009-0323 · GHSA-hw93-jhp7-rqq6
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote…
Priority HIGH 78
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAt…