WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor netscape✕
Overview 120 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 38 public PoC · 0 EPSS ≥ 0.5
120matches 2in Waratek scope1.7% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 38public PoC31.7% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 1.7% Outside Waratek scope 1 0.8% Not applicable 117 97.5% Withdrawn CVE 0 0.0%
Critical 1 0.8% High 47 39.2% Medium 58 48.3% Low 14 11.7% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 120 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 38 31.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 82 68.3%
split by peak 22 / year
Not applicable: 117Outside Waratek scope: 1No exploit published: 2 Low: 14Medium: 58High: 47Critical: 1 not blocked: 120 No public exploit: 82Working exploit published: 38
19964 No exploit published1 Not applicable3 Critical1 High2 Low1 not blocked4 Working exploit published1 No public exploit3 19974 Not applicable4 High1 Medium2 Low1 not blocked4 Working exploit published1 No public exploit3 19987 Not applicable7 High4 Medium2 Low1 not blocked7 Working exploit published4 No public exploit3 199921 No exploit published1 Not applicable20 High5 Medium12 Low4 not blocked21 Working exploit published6 No public exploit15 200022 Not applicable22 High10 Medium9 Low3 not blocked22 Working exploit published10 No public exploit12 200114 Not applicable14 High5 Medium8 Low1 not blocked14 Working exploit published4 No public exploit10 200217 Not applicable17 High7 Medium10 not blocked17 Working exploit published3 No public exploit14 20035 Not applicable5 High1 Medium3 Low1 not blocked5 Working exploit published1 No public exploit4 20048 Outside Waratek scope1 Not applicable7 High5 Medium2 Low1 not blocked8 Working exploit published2 No public exploit6 20055 Not applicable5 High3 Medium2 not blocked5 Working exploit published2 No public exploit3 20066 Not applicable6 High1 Medium4 Low1 not blocked6 Working exploit published3 No public exploit3 20073 Not applicable3 High2 Medium1 not blocked3 Working exploit published1 No public exploit2 20082 Not applicable2 High1 Medium1 not blocked2 No public exploit2 20091 Not applicable1 Medium1 not blocked1 No public exploit1 20100 20110 20120 20130 20140 20150 20160 20170 20180 20191 Not applicable1 Medium1 not blocked1 No public exploit1
199719992001200320052007200920112013201520172019
120 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-1999-0807 High 1999-05-01 Not applicable No public exploit The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.
CVE-1999-0425 Medium 1999-03-18 Not applicable No public exploit talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
CVE-1999-0424 Low 1999-03-18 Not applicable No public exploit talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
CVE-1999-0479 Medium 1999-03-01 Not applicable No public exploit Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
CVE-1999-0440 High 1999-03-01 No exploit published No public exploit The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
CVE-1999-0869 Low 1998-12-01 Not applicable Working exploit published Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
CVE-1999-0269 Medium 1998-08-01 Not applicable Working exploit published Netscape Enterprise servers may list files through the PageServices query.
CVE-1999-0005 High 1998-07-20 Not applicable Working exploit published Arbitrary command execution via IMAP buffer overflow in authenticate command.
CVE-1999-0007 Medium 1998-06-26 Not applicable No public exploit Information from SSL-encrypted sessions via PKCS #1.
CVE-1999-0537 High 1998-04-01 Not applicable No public exploit A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
CVE-1999-0012 High 1998-02-06 Not applicable No public exploit Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
CVE-1999-0239 High 1998-01-01 Not applicable Working exploit published Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
CVE-1999-1262 Medium 1997-08-01 Not applicable No public exploit Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.
CVE-1999-0031 Low 1997-07-08 Not applicable No public exploit JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.
CVE-1999-0868 High 1997-02-20 Not applicable No public exploit ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
CVE-1999-0174 Medium 1997-02-01 Not applicable Working exploit published The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-1999-0045 High 1996-12-10 Not applicable Working exploit published List of arbitrary files on Web host via nph-test-cgi script.
CVE-1999-0043 Critical 1996-12-04 Not applicable No public exploit Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVE-1999-0141 Low 1996-03-29 Not applicable No public exploit Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
CVE-1999-0142 High 1996-03-01 No exploit published No public exploit The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.
‹ prev page 2 of 2 next ›