| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| url |
VCID-5wgm-w7y2-d7g4 |
| vulnerability_id |
VCID-5wgm-w7y2-d7g4 |
| summary |
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9441 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00892 |
| scoring_system |
epss |
| scoring_elements |
0.76097 |
| published_at |
2026-06-14T12:55:00Z |
|
| 1 |
| value |
0.00892 |
| scoring_system |
epss |
| scoring_elements |
0.7609 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00892 |
| scoring_system |
epss |
| scoring_elements |
0.76018 |
| published_at |
2026-06-11T12:55:00Z |
|
| 3 |
| value |
0.00892 |
| scoring_system |
epss |
| scoring_elements |
0.76103 |
| published_at |
2026-06-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9441 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-9441
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5wgm-w7y2-d7g4 |
|
| 6 |
| url |
VCID-6ugy-rxst-jfb5 |
| vulnerability_id |
VCID-6ugy-rxst-jfb5 |
| summary |
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9428 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01594 |
| scoring_system |
epss |
| scoring_elements |
0.82157 |
| published_at |
2026-06-13T12:55:00Z |
|
| 1 |
| value |
0.01594 |
| scoring_system |
epss |
| scoring_elements |
0.8215 |
| published_at |
2026-06-14T12:55:00Z |
|
| 2 |
| value |
0.01594 |
| scoring_system |
epss |
| scoring_elements |
0.82087 |
| published_at |
2026-06-11T12:55:00Z |
|
| 3 |
| value |
0.01594 |
| scoring_system |
epss |
| scoring_elements |
0.82148 |
| published_at |
2026-06-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9428 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-9428
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6ugy-rxst-jfb5 |
|
| 7 |
| url |
VCID-7qnk-cm5b-akdj |
| vulnerability_id |
VCID-7qnk-cm5b-akdj |
| summary |
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) and possibly memory corruption via a crafted HTML page. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9437 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0061 |
| scoring_system |
epss |
| scoring_elements |
0.7034 |
| published_at |
2026-06-14T12:55:00Z |
|
| 1 |
| value |
0.0061 |
| scoring_system |
epss |
| scoring_elements |
0.70329 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.0061 |
| scoring_system |
epss |
| scoring_elements |
0.70238 |
| published_at |
2026-06-11T12:55:00Z |
|
| 3 |
| value |
0.0061 |
| scoring_system |
epss |
| scoring_elements |
0.70342 |
| published_at |
2026-06-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9437 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-9437
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7qnk-cm5b-akdj |
|
| 8 |
|
| 9 |
| url |
VCID-84j6-91vh-nbg1 |
| vulnerability_id |
VCID-84j6-91vh-nbg1 |
| summary |
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9435 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0141 |
| scoring_system |
epss |
| scoring_elements |
0.80924 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.0141 |
| scoring_system |
epss |
| scoring_elements |
0.80994 |
| published_at |
2026-06-13T12:55:00Z |
|
| 2 |
| value |
0.0141 |
| scoring_system |
epss |
| scoring_elements |
0.80984 |
| published_at |
2026-06-12T12:55:00Z |
|
| 3 |
| value |
0.0141 |
| scoring_system |
epss |
| scoring_elements |
0.80985 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9435 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-9435
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-84j6-91vh-nbg1 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
| url |
VCID-dyzb-eta6-1kaj |
| vulnerability_id |
VCID-dyzb-eta6-1kaj |
| summary |
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2002-1348 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01658 |
| scoring_system |
epss |
| scoring_elements |
0.8246 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.01658 |
| scoring_system |
epss |
| scoring_elements |
0.82522 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.01658 |
| scoring_system |
epss |
| scoring_elements |
0.82531 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.01658 |
| scoring_system |
epss |
| scoring_elements |
0.82526 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2002-1348 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2002-1348
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dyzb-eta6-1kaj |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
| url |
VCID-ne6t-jjq2-vfgt |
| vulnerability_id |
VCID-ne6t-jjq2-vfgt |
| summary |
Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2002-1335 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01398 |
| scoring_system |
epss |
| scoring_elements |
0.80823 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.01398 |
| scoring_system |
epss |
| scoring_elements |
0.80883 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.01398 |
| scoring_system |
epss |
| scoring_elements |
0.80893 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.01398 |
| scoring_system |
epss |
| scoring_elements |
0.80885 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2002-1335 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2002-1335
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ne6t-jjq2-vfgt |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
| url |
VCID-nzxj-xgr9-pbbs |
| vulnerability_id |
VCID-nzxj-xgr9-pbbs |
| summary |
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feed_table_tag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9422 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01043 |
| scoring_system |
epss |
| scoring_elements |
0.7796 |
| published_at |
2026-06-14T12:55:00Z |
|
| 1 |
| value |
0.01043 |
| scoring_system |
epss |
| scoring_elements |
0.77953 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.01043 |
| scoring_system |
epss |
| scoring_elements |
0.77884 |
| published_at |
2026-06-11T12:55:00Z |
|
| 3 |
| value |
0.01043 |
| scoring_system |
epss |
| scoring_elements |
0.77967 |
| published_at |
2026-06-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9422 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-9422
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nzxj-xgr9-pbbs |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|