Vulnerabilities (CVE)

Filtered by vendor Netscape Subscribe
Total 120 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0406 1 Netscape 1 Communicator 2008-09-10 2.6 LOW N/A
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.
CVE-2000-0237 1 Netscape 1 Enterprise Server 2008-09-10 6.4 MEDIUM N/A
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
CVE-1999-0853 1 Netscape 2 Enterprise Server, Fasttrack Server 2008-09-09 10.0 HIGH N/A
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
CVE-1999-0790 1 Netscape 1 Communicator 2008-09-09 2.6 LOW N/A
A remote attacker can read information from a Netscape user's cache via JavaScript.
CVE-1999-0686 2 Hp, Netscape 2 Hp-ux, Enterprise Server 2008-09-09 5.0 MEDIUM N/A
Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
CVE-1999-0685 1 Netscape 1 Communicator 2008-09-09 5.1 MEDIUM N/A
Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
CVE-1999-0479 2 Hp, Netscape 2 Hp-ux, Enterprise Server 2008-09-09 5.0 MEDIUM N/A
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
CVE-1999-0141 1 Netscape 1 Navigator 2008-09-09 3.7 LOW N/A
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
CVE-1999-0005 2 Netscape, University Of Washington 2 Messaging Server, Imap 2008-09-09 10.0 HIGH N/A
Arbitrary command execution via IMAP buffer overflow in authenticate command.
CVE-2004-1160 1 Netscape 1 Navigator 2008-09-05 7.5 HIGH N/A
Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
CVE-2003-1265 2 Mozilla, Netscape 2 Mozilla, Navigator 2008-09-05 2.1 LOW N/A
Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted messages.
CVE-2002-2338 2 Mozilla, Netscape 3 Mozilla, Communicator, Navigator 2008-09-05 5.0 MEDIUM N/A
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
CVE-2002-2308 1 Netscape 1 Communicator 2008-09-05 5.0 MEDIUM N/A
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself.
CVE-2002-2013 2 Mozilla, Netscape 3 Mozilla, Communicator, Navigator 2008-09-05 5.0 MEDIUM N/A
Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
CVE-2002-1042 2 Netscape, Sun 4 Enterprise Server, Iplanet Web Server, One Application Server and 1 more 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.
CVE-2002-0594 3 Galeon, Mozilla, Netscape 3 Galeon Browser, Mozilla, Navigator 2008-09-05 5.0 MEDIUM N/A
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.
CVE-2002-0593 2 Mozilla, Netscape 3 Mozilla, Communicator, Navigator 2008-09-05 7.5 HIGH N/A
Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.
CVE-2001-0262 1 Netscape 1 Smartdownload 2008-09-05 7.5 HIGH N/A
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.
CVE-2000-0308 2 Netscape, Sco 4 Enterprise Server, Fasttrack Server, Proxy Server and 1 more 2008-09-05 10.0 HIGH N/A
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
CVE-1999-0744 1 Netscape 2 Enterprise Server, Fasttrack Server 2008-09-05 7.5 HIGH N/A
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.