WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor netscape✕
Overview 38 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 EPSS ≥ 0.5
38matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 38 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 12 31.6% Medium 23 60.5% Low 3 7.9% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 38 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 38 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 10 / year
Not applicable: 38 Low: 3Medium: 23High: 12 not blocked: 38 Working exploit published: 38
19961 Not applicable1 High1 not blocked1 Working exploit published1 19971 Not applicable1 Medium1 not blocked1 Working exploit published1 19984 Not applicable4 High2 Medium1 Low1 not blocked4 Working exploit published4 19996 Not applicable6 Medium6 not blocked6 Working exploit published6 200010 Not applicable10 High5 Medium4 Low1 not blocked10 Working exploit published10 20014 Not applicable4 High2 Medium2 not blocked4 Working exploit published4 20023 Not applicable3 Medium3 not blocked3 Working exploit published3 20031 Not applicable1 Medium1 not blocked1 Working exploit published1 20042 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 20052 Not applicable2 Medium2 not blocked2 Working exploit published2 20063 Not applicable3 High1 Medium1 Low1 not blocked3 Working exploit published3 20071 Not applicable1 Medium1 not blocked1 Working exploit published1
199619971998199920002001200220032004200520062007
38 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2007-1377 Medium 2007-03-10 Not applicable Working exploit published AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.
CVE-2006-4842 Low 2006-10-12 Not applicable Working exploit published The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.
CVE-2006-4253 High 2006-08-21 Not applicable Working exploit published Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3. NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie. Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability. NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.
CVE-2006-2894 Medium 2006-06-07 Not applicable Working exploit published Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.
CVE-2005-4134 Medium 2005-12-09 Not applicable Working exploit published Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.
CVE-2005-0989 Medium 2005-05-02 Not applicable Working exploit published The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.
CVE-2004-0722 High 2004-08-18 Not applicable Working exploit published Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.
CVE-2004-0528 Medium 2004-08-06 Not applicable Working exploit published Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
CVE-2003-1419 Medium 2003-12-31 Not applicable Working exploit published Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the JavaScript reformatDate function.
CVE-2002-2338 Medium 2002-12-31 Not applicable Working exploit published The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
CVE-2002-1766 Medium 2002-12-31 Not applicable Working exploit published Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute.
CVE-2002-1042 Medium 2002-10-04 Not applicable Working exploit published Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.
CVE-2000-1196 Medium 2001-08-31 Not applicable Working exploit published PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.
CVE-2001-0596 High 2001-08-02 Not applicable Working exploit published Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
CVE-2001-0262 High 2001-07-02 Not applicable Working exploit published Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.
CVE-2001-0250 Medium 2001-06-02 Not applicable Working exploit published The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.
CVE-2000-1075 Medium 2000-12-11 Not applicable Working exploit published Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
CVE-2000-1074 High 2000-12-11 Not applicable Working exploit published csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.
CVE-2000-1072 High 2000-12-11 Not applicable Working exploit published iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.
CVE-2000-0711 High 2000-10-20 Not applicable Working exploit published Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
CVE-2000-0676 Medium 2000-10-20 Not applicable Working exploit published Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.
CVE-2000-0655 Medium 2000-07-25 Not applicable Working exploit published Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.
CVE-2000-0577 High 2000-06-21 Not applicable Working exploit published Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0409 Low 2000-05-10 Not applicable Working exploit published Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
CVE-2000-0236 Medium 2000-03-17 Not applicable Working exploit published Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
CVE-1999-0744 High 2000-01-04 Not applicable Working exploit published Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
CVE-1999-1005 Medium 1999-12-19 Not applicable Working exploit published Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
CVE-1999-1532 Medium 1999-10-29 Not applicable Working exploit published Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.
CVE-1999-0751 Medium 1999-09-13 Not applicable Working exploit published Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
CVE-1999-0685 Medium 1999-09-02 Not applicable Working exploit published Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
CVE-1999-1130 Medium 1999-07-30 Not applicable Working exploit published Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
CVE-1999-0752 Medium 1999-07-06 Not applicable Working exploit published Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
CVE-1999-0869 Low 1998-12-01 Not applicable Working exploit published Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
CVE-1999-0269 Medium 1998-08-01 Not applicable Working exploit published Netscape Enterprise servers may list files through the PageServices query.
CVE-1999-0005 High 1998-07-20 Not applicable Working exploit published Arbitrary command execution via IMAP buffer overflow in authenticate command.
CVE-1999-0239 High 1998-01-01 Not applicable Working exploit published Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
CVE-1999-0174 Medium 1997-02-01 Not applicable Working exploit published The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-1999-0045 High 1996-12-10 Not applicable Working exploit published List of arbitrary files on Web host via nph-test-cgi script.