Overview 9 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
9matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
1public PoC11.1%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
9
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
9
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1
11.1%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
8
88.9%
split by
peak 3 / year
19971
Not applicable1
Low1
not blocked1
No public exploit1
19980
19993
Not applicable3
Low3
not blocked3
No public exploit3
20003
Not applicable3
Low3
not blocked3
Working exploit published1
No public exploit2
20011
Not applicable1
Low1
not blocked1
No public exploit1
20020
20030
20040
20050
20060
20071
Not applicable1
Low1
not blocked1
No public exploit1
19971998199920002001200220032004200520062007
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2007-1467 | Low | 2007-03-16 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form. |
| CVE-2001-0921 | Low | 2001-11-21 | Not applicable | No public exploit | Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext. |
| CVE-2000-0409 | Low | 2000-05-10 | Not applicable | Working exploit published | Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate. |
| CVE-2000-0406 | Low | 2000-05-10 | Not applicable | No public exploit | Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability. |
| CVE-1999-0790 | Low | 2000-04-01 | Not applicable | No public exploit | A remote attacker can read information from a Netscape user's cache via JavaScript. |
| CVE-1999-1226 | Low | 1999-10-28 | Not applicable | No public exploit | Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key. |
| CVE-1999-0762 | Low | 1999-05-24 | Not applicable | No public exploit | When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information. |
| CVE-1999-0424 | Low | 1999-03-18 | Not applicable | No public exploit | talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes. |
| CVE-1999-0031 | Low | 1997-07-08 | Not applicable | No public exploit | JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability. |