WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Product communicator✕Has a public PoC✕
Overview 12 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 2 EPSS ≥ 0.5
12matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 2EPSS ≥ 0.516.7%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 12 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 3 25.0% Medium 8 66.7% Low 1 8.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 12 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 12 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 4 / year
Not applicable: 12 Low: 1Medium: 8High: 3 not blocked: 12 Working exploit published: 12
19971 Not applicable1 Medium1 not blocked1 Working exploit published1 19980 19991 Not applicable1 Medium1 not blocked1 Working exploit published1 20004 Not applicable4 High1 Medium2 Low1 not blocked4 Working exploit published4 20011 Not applicable1 High1 not blocked1 Working exploit published1 20022 Not applicable2 Medium2 not blocked2 Working exploit published2 20030 20040 20050 20060 20070 20081 Not applicable1 Medium1 not blocked1 Working exploit published1 20090 20100 20111 Not applicable1 High1 not blocked1 Working exploit published1 20121 Not applicable1 Medium1 not blocked1 Working exploit published1
19982000200220042006200820102012
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2012-1858 Medium 2012-06-12 Not applicable Working exploit published The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."
CVE-2011-4040 High 2011-11-21 Not applicable Working exploit published Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet.
CVE-2008-5180 Medium 2008-11-20 Not applicable Working exploit published Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.
CVE-2002-2338 Medium 2002-12-31 Not applicable Working exploit published The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
CVE-2002-1766 Medium 2002-12-31 Not applicable Working exploit published Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute.
CVE-2001-0596 High 2001-08-02 Not applicable Working exploit published Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
CVE-2000-0711 High 2000-10-20 Not applicable Working exploit published Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
CVE-2000-0676 Medium 2000-10-20 Not applicable Working exploit published Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.
CVE-2000-0655 Medium 2000-07-25 Not applicable Working exploit published Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.
CVE-2000-0409 Low 2000-05-10 Not applicable Working exploit published Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
CVE-1999-0685 Medium 1999-09-02 Not applicable Working exploit published Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
CVE-1999-0174 Medium 1997-02-01 Not applicable Working exploit published The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.