Netscape vulnerabilities, page 4
110 vulnerabilities
Known vulnerabilities in Netscape products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 21 products.
CVE-1999-0685netscapecommunicator
EPSS score1.59%
Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.CVE-1999-0141netscapenavigatorEPSS score0.37%
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.CVE-1999-0031microsoftinternet_explorer+1EPSS score18.30%
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.CVE-1999-0005netscapemessaging_server+1EPSS score18.41%
Arbitrary command execution via IMAP buffer overflow in authenticate command.CVE-1999-0424netscapecommunicatorEPSS score0.38%
talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.CVE-1999-0045apachehttp_server+3EPSS score25.97%
List of arbitrary files on Web host via nph-test-cgi script.CVE-1999-0758netscapeenterprise_server+1EPSS score1.88%
Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL.CVE-1999-0827microsoftie+2EPSS score4.78%
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.CVE-1999-0425netscapecommunicatorEPSS score1.26%
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.CVE-1999-0479hphp-ux+1EPSS score1.81%
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.CVE-1999-0012microsoftinternet_information_server+3EPSS score18.53%
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.CVE-1999-0892netscapecommunicatorEPSS score0.40%
Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.CVE-1999-0239netscapefasttrack_serverEPSS score7.59%
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.CVE-1999-0868iscinn+4EPSS score1.50%
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.CVE-1999-0174netscapecommunicatorEPSS score6.90%
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-0809netscapecommunicatorEPSS score1.40%
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed".CVE-1999-0440netscapecommunicator+1EPSS score3.64%
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.CVE-1999-0790netscapecommunicatorEPSS score1.02%
A remote attacker can read information from a Netscape user's cache via JavaScript.CVE-2004-1236netscapedirectory_serverEPSS score8.85%
Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code.CVE-2004-1160netscapenavigatorEPSS score1.73%
Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.