Skip to content
OpenAdvisories

Package · Debian

w3m

44 known vulnerabilities.

44 results · Feed

  • Unscored —

    istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' …

  • Unscored —

    Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backen…

  • Unscored —

    w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote atta…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attac…