Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
htmlunit htmlunit vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2023-2798
Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service...
Htmlunit Htmlunit
8.8
CVSSv3
CVE-2023-49093
HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0
Htmlunit Htmlunit
9.8
CVSSv3
CVE-2023-26119
Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and prior to 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.
Htmlunit Htmlunit
1 Github repository
7.5
CVSSv3
CVE-2022-29546
HtmlUnit NekoHtml Parser prior to 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction (PI) data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the produ...
Htmlunit Htmlunit
1 Github repository
7.5
CVSSv3
CVE-2022-28366
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko up to and including 2.26, and is fixed in 2.27. This issue also exists in Cyb...
Cyberneko Html Project Cyberneko Html
Htmlunit Htmlunit
Antisamy Project Antisamy
1 Github repository
8.1
CVSSv3
CVE-2020-5529
HtmlUnit before 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rh...
Htmlunit Htmlunit
Debian Debian Linux 9.0
Canonical Ubuntu Linux 16.04
Apache Camel -
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of service
CVE-2024-27371
CVE-2024-20405
CVE-2024-31627
CVE-2024-31625
race condition
CVE-2024-4358
cross-site scripting
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started