Login Request a demo
NE
Vendor
Netscape
21 products with CVEs on record
146
CVEs
0
On KEV
0
New 30D
Products
NA
Navigator
Netscape
–
44 CVEs0 on KEV0 new
CO
Communicator
Netscape
–
35 CVEs0 on KEV0 new
ES
Enterprise Server
Netscape
7.0
24 CVEs0 on KEV0 new
FS
Fasttrack Server
Netscape
7.5
8 CVEs0 on KEV0 new
DS
Directory Server
Netscape
–
7 CVEs0 on KEV0 new
MS
Messaging Server
Netscape
–
5 CVEs0 on KEV0 new
II
Iplanet Ical
Netscape
–
4 CVEs0 on KEV0 new
CS
Collabra Server
Netscape
–
3 CVEs0 on KEV0 new
CS
Certificate Server
Netscape
–
2 CVEs0 on KEV0 new
NS
News Server
Netscape
9.8
2 CVEs0 on KEV0 new
PS
Proxy Server
Netscape
–
2 CVEs0 on KEV0 new
CM
Certificate Management System
Netscape
–
1 CVEs0 on KEV0 new
CS
Commerce Server
Netscape
–
1 CVEs0 on KEV0 new
CS
Communications Server
Netscape
–
1 CVEs0 on KEV0 new
ME
Messanger
Netscape
–
1 CVEs0 on KEV0 new
NM
Netscape Messaging Server Multiplexor
Netscape
–
1 CVEs0 on KEV0 new
PE
Personalization Engine
Netscape
–
1 CVEs0 on KEV0 new
PR
Portable Runtime Api
Netscape
–
1 CVEs0 on KEV0 new
PS
Professional Services Ftpserver
Netscape
–
1 CVEs0 on KEV0 new
PU
Publishingxpert
Netscape
–
1 CVEs0 on KEV0 new
SM
Smartdownload
Netscape
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2018-18940
ES
Enterprise Server
Netscape
6.1
1%
Jan 31servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string
CVE-2009-2542
NA
Navigator
Netscape
–
2%
Jul 20Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to…
CVE-2008-2809
NA
Navigator
Netscape
–
1%
Jul 8Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user…
CVE-2008-1676
CM
Certificate Management System
Netscape
–
1%
Jul 7Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does…
CVE-2007-4042
NA
Navigator
Netscape
–
10%
Jul 27Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1)…
CVE-2007-3924
NA
Navigator
Netscape
–
14%
Jul 21Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct…
CVE-2007-1377
NA
Navigator
Netscape
–
18%
Mar 10AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption)…
CVE-2006-6077
NA
Navigator
Netscape
–
2%
Nov 24The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that…
CVE-2006-4842
PR
Portable Runtime Api
Netscape
–
8%
Oct 12The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from…
CVE-2006-4253
NA
Navigator
Netscape
–
15%
Aug 21Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple…
CVE-2006-2894
NA
Navigator
Netscape
–
10%
Jun 7Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted…
CVE-2006-2613
NA
Navigator
Netscape
–
2%
May 26Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other versions and products, allows remote…
CVE-2006-1942
NA
Navigator
Netscape
–
3%
Apr 20Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via…
CVE-2005-4134
NA
Navigator
Netscape
–
13%
Dec 9Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via…
CVE-2005-0989
NA
Navigator
Netscape
–
10%
May 2The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap…
CVE-2005-1157
NA
Navigator
Netscape
–
2%
May 2Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and…
CVE-2005-1156
NA
Navigator
Netscape
–
2%
May 2Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using…
CVE-2004-1160
NA
Navigator
Netscape
–
2%
Jan 10Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is…
CVE-2004-0904
NA
Navigator
Netscape
–
8%
Dec 31Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute…
CVE-2004-1753
NA
Navigator
Netscape
–
2%
Dec 31The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle…
CVE-2004-1236
DS
Directory Server
Netscape
–
9%
Dec 31Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code
CVE-2004-0826
CS
Certificate Server
Netscape
–
23%
Dec 31Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2…
CVE-2004-0905
NA
Navigator
Netscape
–
3%
Sep 14Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute…
CVE-2004-0722
NA
Navigator
Netscape
–
13%
Aug 18Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute…
CVE-2004-0528
NA
Navigator
Netscape
–
2%
Aug 6Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined…
CVE-2004-0718
NA
Navigator
Netscape
–
2%
Jul 27The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that…
CVE-2003-1419
NA
Navigator
Netscape
–
2%
Dec 31Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the JavaScript reformatDate function
CVE-2003-1560
NA
Navigator
Netscape
–
1%
Dec 31Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading…
CVE-2003-1492
NA
Navigator
Netscape
–
1%
Dec 31Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra
CVE-2003-1265
NA
Navigator
Netscape
–
0%
Dec 31Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted…
CVE-2003-0553
NA
Navigator
Netscape
–
3%
Aug 18Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename
CVE-2002-2338
CO
Communicator
Netscape
–
4%
Dec 31The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message…
CVE-2002-2308
CO
Communicator
Netscape
–
1%
Dec 31Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is…
CVE-2002-2284
CO
Communicator
Netscape
–
2%
Dec 31Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes
CVE-2002-2248
CO
Communicator
Netscape
–
6%
Dec 31Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the…
CVE-2002-2061
NA
Navigator
Netscape
–
3%
Dec 31Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large…
CVE-2002-2013
CO
Communicator
Netscape
–
2%
Dec 31Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by…
CVE-2002-1766
CO
Communicator
Netscape
–
1%
Dec 31Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute
CVE-2002-1654
ES
Enterprise Server
Netscape
–
3%
Dec 31iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher…
CVE-2002-1655
ES
Enterprise Server
Netscape
–
2%
Dec 31The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request
CVE-2002-1308
NA
Navigator
Netscape
–
4%
Nov 29Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer…
CVE-2002-1204
CO
Communicator
Netscape
–
1%
Nov 29Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and…
CVE-2002-1091
NA
Navigator
Netscape
–
4%
Oct 4Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width
CVE-2002-1042
ES
Enterprise Server
Netscape
–
4%
Oct 4Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote…
CVE-2002-0815
NA
Navigator
Netscape
–
4%
Aug 12The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content…
CVE-2002-0354
NA
Navigator
Netscape
–
1%
Jun 25The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that…
CVE-2002-0594
NA
Navigator
Netscape
–
2%
Jun 18Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS)…
CVE-2002-0593
CO
Communicator
Netscape
–
4%
Jun 18Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel…
CVE-2001-0921
CO
Communicator
Netscape
–
1%
Nov 21Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been…
CVE-2001-0745
ME
Messanger
Netscape
–
2%
Oct 18Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox:…
CVE-2001-0683
CS
Collabra Server
Netscape
–
1%
Sep 20Memory leak in Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service (memory exhaustion) by repeatedly sending approximately 5K of data…
CVE-2001-0684
CS
Collabra Server
Netscape
–
2%
Sep 20Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service by sending seven or more characters to TCP port 5239
CVE-2000-1196
PU
Publishingxpert
Netscape
–
4%
Aug 31PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter
CVE-2001-0596
CO
Communicator
Netscape
–
9%
Aug 2Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript
CVE-2001-0262
SM
Smartdownload
Netscape
–
7%
Jul 2Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL
CVE-2001-0164
DS
Directory Server
Netscape
–
2%
Jun 2Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field
CVE-2001-0251
ES
Enterprise Server
Netscape
–
3%
Jun 2The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command
CVE-2001-0250
ES
Enterprise Server
Netscape
–
3%
Jun 2The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command
CVE-2001-0175
FS
Fasttrack Server
Netscape
–
2%
Mar 26The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs
CVE-2000-0308
ES
Enterprise Server
Netscape
–
2%
Mar 12Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges