W3c

    Dashboard / Vendors

    Products: 7
    Vulnerabilities: 12
    Known Exploited: 0
    2
    Critical Level Threats
    2
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-50571

    WebSub: Reflected script execution through intent-verification challenges

    Last Modified: Oct 28, 2026
    Published: Oct 27, 2026

    CVE-2025-1781

    There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request forgery (SSRF).  This could be exploited to read arbitrary local files if an attacker has access to exception messages.

    Last Modified: Aug 01, 2025
    Published: Mar 28, 2025

    CVE-2020-4070

    Cross-site Scripting in CSS Validator

    Last Modified: Nov 21, 2024
    Published: Jun 22, 2020

    CVE-2008-6005

    Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via "duplicated" attribute value inputs.

    Last Modified: Apr 23, 2026
    Published: Jan 28, 2009

    CVE-2008-5282

    Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag with a long id attribute.

    Last Modified: Apr 23, 2026
    Published: Nov 29, 2008
    Items Per Page