Navigator
by Netscape
CVEs (47)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2000-0087 | 0.00 | — | 0.01 | Jan 12, 2000 | Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext. | |||
| CVE-1999-1189 | 0.00 | — | 0.03 | Nov 24, 1999 | Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl… | |||
| CVE-1999-0827 | 0.00 | — | 0.05 | Nov 1, 1999 | By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing. | |||
| CVE-1999-0762 | 0.00 | — | 0.01 | May 24, 1999 | When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information. | |||
| CVE-1999-0440 | 0.00 | — | 0.04 | Mar 1, 1999 | The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. | |||
| CVE-1999-0141 | 0.00 | — | 0.00 | Mar 29, 1996 | Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet. | |||
| CVE-1999-0142 | 0.00 | — | 0.02 | Mar 1, 1996 | The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts. |
- CVE-2000-0087Jan 12, 2000risk 0.00cvss —epss 0.01
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
- CVE-1999-1189Nov 24, 1999risk 0.00cvss —epss 0.03
Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl…
- CVE-1999-0827Nov 1, 1999risk 0.00cvss —epss 0.05
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
- CVE-1999-0762May 24, 1999risk 0.00cvss —epss 0.01
When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information.
- CVE-1999-0440Mar 1, 1999risk 0.00cvss —epss 0.04
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
- CVE-1999-0141Mar 29, 1996risk 0.00cvss —epss 0.00
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
- CVE-1999-0142Mar 1, 1996risk 0.00cvss —epss 0.02
The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.
Page 3 of 3