44 results · Feed
-
Unscored —
istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' …
-
Unscored —
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backen…
-
Unscored —
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attac…