WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor netscape✕
Overview 14 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
14matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 3public PoC21.4% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 14 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 0 0.0% Low 14 100.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 14 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 21.4% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 11 78.6%
split by peak 4 / year
Not applicable: 14 Low: 14 not blocked: 14 No public exploit: 11Working exploit published: 3
19961 Not applicable1 Low1 not blocked1 No public exploit1 19971 Not applicable1 Low1 not blocked1 No public exploit1 19981 Not applicable1 Low1 not blocked1 Working exploit published1 19994 Not applicable4 Low4 not blocked4 No public exploit4 20003 Not applicable3 Low3 not blocked3 Working exploit published1 No public exploit2 20011 Not applicable1 Low1 not blocked1 No public exploit1 20020 20031 Not applicable1 Low1 not blocked1 No public exploit1 20041 Not applicable1 Low1 not blocked1 No public exploit1 20050 20061 Not applicable1 Low1 not blocked1 Working exploit published1
19961997199819992000200120022003200420052006
14 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2006-4842 Low 2006-10-12 Not applicable Working exploit published The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.
CVE-2004-1753 Low 2004-12-31 Not applicable No public exploit The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.
CVE-2003-1265 Low 2003-12-31 Not applicable No public exploit Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted messages.
CVE-2001-0921 Low 2001-11-21 Not applicable No public exploit Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext.
CVE-2000-0409 Low 2000-05-10 Not applicable Working exploit published Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
CVE-2000-0406 Low 2000-05-10 Not applicable No public exploit Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.
CVE-1999-0790 Low 2000-04-01 Not applicable No public exploit A remote attacker can read information from a Netscape user's cache via JavaScript.
CVE-1999-0827 Low 1999-11-01 Not applicable No public exploit By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
CVE-1999-1226 Low 1999-10-28 Not applicable No public exploit Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.
CVE-1999-0762 Low 1999-05-24 Not applicable No public exploit When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information.
CVE-1999-0424 Low 1999-03-18 Not applicable No public exploit talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
CVE-1999-0869 Low 1998-12-01 Not applicable Working exploit published Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
CVE-1999-0031 Low 1997-07-08 Not applicable No public exploit JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.
CVE-1999-0141 Low 1996-03-29 Not applicable No public exploit Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.