W3
Vendor
W3c
11
CVEs
0
On KEV
1
New 30D
Products
WE5.7
websub
w3c
1 CVEs0 on KEV1 new
JI–
Jigsaw
W3c
3 CVEs0 on KEV0 new
AW–
Amaya Web Browser
W3c
2 CVEs0 on KEV0 new
CH–
Cern Httpd
W3c
2 CVEs0 on KEV0 new
AM–
Amaya
W3c
1 CVEs0 on KEV0 new
CV5.4
Css Validator
W3c
1 CVEs0 on KEV0 new
LI–
Libwww
W3c
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-50571 New | WE websub w3c | 5.7 | Oct 27 | WebSub: Reflected script execution through intent-verification challenges |
| CVE-2020-4070 | CV Css Validator W3c | 5.4 | Jun 22 | In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs |
| CVE-2008-6005 | AW Amaya Web Browser W3c | – | Jan 28 | Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute… |
| CVE-2008-5282 | AW Amaya Web Browser W3c | – | Nov 29 | Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag… |
| CVE-2006-1900 | AM Amaya W3c | – | Apr 20 | Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code… |
| CVE-2005-3183 | LI Libwww W3c | – | Oct 12 | The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted… |
| CVE-2004-2274 | JI Jigsaw W3c | – | Dec 31 | Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI |
| CVE-2002-1053 | JI Jigsaw W3c | – | Oct 4 | Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a… |
| CVE-2002-1052 | JI Jigsaw W3c | – | Oct 4 | Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the… |
| CVE-2002-1445 | CH Cern Httpd W3c | – | Aug 12 | Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the… |
| CVE-2000-0079 | CH Cern Httpd W3c | – | Jan 18 | The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL |