Overview 24 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 10 public PoC · 0 EPSS ≥ 0.5
24matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
10public PoC41.7%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
4.2%
Not applicable
23
95.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
24
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
10
41.7%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
14
58.3%
split by
peak 7 / year
19961
Not applicable1
High1
not blocked1
Working exploit published1
19970
19983
Not applicable3
High1
Medium2
not blocked3
Working exploit published1
No public exploit2
19997
Not applicable7
High1
Medium6
not blocked7
Working exploit published4
No public exploit3
20004
Not applicable4
High2
Medium2
not blocked4
Working exploit published2
No public exploit2
20014
Not applicable4
High1
Medium3
not blocked4
Working exploit published1
No public exploit3
20023
Not applicable3
High1
Medium2
not blocked3
Working exploit published1
No public exploit2
20030
20041
Outside Waratek scope1
High1
not blocked1
No public exploit1
20050
20060
20070
20080
20090
20100
20110
20120
20130
20140
20150
20160
20170
20180
20191
Not applicable1
Medium1
not blocked1
No public exploit1
199719992001200320052007200920112013201520172019
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2018-18940 | Medium | 2019-01-31 | Not applicable | No public exploit | servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. NOTE: this product is discontinued. |
| CVE-2004-0826 | High | 2004-12-31 | Outside Waratek scope | No public exploit | Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message. |
| CVE-2002-1655 | Medium | 2002-12-31 | Not applicable | No public exploit | The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. |
| CVE-2002-1654 | High | 2002-12-31 | Not applicable | No public exploit | iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection. |
| CVE-2002-1042 | Medium | 2002-10-04 | Not applicable | Working exploit published | Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter. |
| CVE-2001-0251 | Medium | 2001-06-02 | Not applicable | No public exploit | The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command. |
| CVE-2001-0250 | Medium | 2001-06-02 | Not applicable | Working exploit published | The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command. |
| CVE-2000-0308 | High | 2001-03-12 | Not applicable | No public exploit | Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges. |
| CVE-1999-0758 | Medium | 2001-03-12 | Not applicable | No public exploit | Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL. |
| CVE-2000-0600 | High | 2000-06-26 | Not applicable | No public exploit | Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL. |
| CVE-2000-0236 | Medium | 2000-03-17 | Not applicable | Working exploit published | Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump. |
| CVE-2000-0237 | Medium | 2000-03-11 | Not applicable | No public exploit | Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories. |
| CVE-1999-0744 | High | 2000-01-04 | Not applicable | Working exploit published | Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request. |
| CVE-1999-1005 | Medium | 1999-12-19 | Not applicable | Working exploit published | Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter. |
| CVE-1999-0853 | High | 1999-12-01 | Not applicable | No public exploit | Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure. |
| CVE-1999-0751 | Medium | 1999-09-13 | Not applicable | Working exploit published | Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch. |
| CVE-1999-1130 | Medium | 1999-07-30 | Not applicable | Working exploit published | Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file. |
| CVE-1999-0752 | Medium | 1999-07-06 | Not applicable | Working exploit published | Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. |
| CVE-1999-0686 | Medium | 1999-05-07 | Not applicable | No public exploit | Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL. |
| CVE-1999-0479 | Medium | 1999-03-01 | Not applicable | No public exploit | Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. |
| CVE-1999-0269 | Medium | 1998-08-01 | Not applicable | Working exploit published | Netscape Enterprise servers may list files through the PageServices query. |
| CVE-1999-0007 | Medium | 1998-06-26 | Not applicable | No public exploit | Information from SSL-encrypted sessions via PKCS #1. |
| CVE-1999-0012 | High | 1998-02-06 | Not applicable | No public exploit | Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. |
| CVE-1999-0045 | High | 1996-12-10 | Not applicable | Working exploit published | List of arbitrary files on Web host via nph-test-cgi script. |