Filtered by vendor Netscape Subscriptions
Total 120 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-1999-0827 2 Microsoft, Netscape 3 Ie, Internet Explorer, Navigator 2025-04-03 N/A
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
CVE-1999-0853 1 Netscape 2 Enterprise Server, Fasttrack Server 2025-04-03 N/A
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
CVE-1999-0868 5 Isc, Nec, Netscape and 2 more 6 Inn, Goah Intrasv, Goah Networksv and 3 more 2025-04-03 N/A
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
CVE-1999-0869 2 Microsoft, Netscape 2 Internet Explorer, Navigator 2025-04-03 N/A
Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
CVE-1999-0892 1 Netscape 1 Communicator 2025-04-03 N/A
Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.
CVE-1999-1002 1 Netscape 1 Communicator 2025-04-03 N/A
Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
CVE-1999-1005 2 Netscape, Novell 2 Enterprise Server, Groupwise 2025-04-03 N/A
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
CVE-1999-1130 1 Netscape 1 Enterprise Server 2025-04-03 N/A
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
CVE-1999-1189 1 Netscape 2 Communicator, Navigator 2025-04-03 N/A
Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.
CVE-1999-1226 1 Netscape 1 Communicator 2025-04-03 N/A
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.
CVE-1999-0141 1 Netscape 1 Navigator 2025-04-03 N/A
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
CVE-1999-0752 1 Netscape 1 Enterprise Server 2025-04-03 N/A
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
CVE-2000-0308 2 Netscape, Sco 4 Enterprise Server, Fasttrack Server, Proxy Server and 1 more 2025-04-03 N/A
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
CVE-2000-0237 1 Netscape 1 Enterprise Server 2025-04-03 N/A
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
CVE-1999-0751 1 Netscape 1 Enterprise Server 2025-04-03 N/A
Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
CVE-1999-0269 1 Netscape 1 Enterprise Server 2025-04-03 N/A
Netscape Enterprise servers may list files through the PageServices query.
CVE-2000-0409 1 Netscape 1 Communicator 2025-04-03 N/A
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
CVE-2000-0517 1 Netscape 1 Communicator 2025-04-03 N/A
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.
CVE-2000-0577 1 Netscape 1 Professional Services Ftpserver 2025-04-03 N/A
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0236 1 Netscape 1 Enterprise Server 2025-04-03 N/A
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.