The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.
Max CVSS
2.6
EPSS Score
0.76%
Published
2004-12-31
Updated
2017-07-11
Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted messages.
Max CVSS
2.1
EPSS Score
0.04%
Published
2003-12-31
Updated
2008-09-05
Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext.
Max CVSS
2.1
EPSS Score
0.06%
Published
2001-11-21
Updated
2017-10-10
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.
Max CVSS
2.6
EPSS Score
0.59%
Published
2000-05-10
Updated
2008-09-10
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.
Max CVSS
2.6
EPSS Score
0.13%
Published
1999-10-28
Updated
2017-10-10
Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
Max CVSS
2.6
EPSS Score
2.63%
Published
1998-12-01
Updated
2021-07-22
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
Max CVSS
2.6
EPSS Score
0.23%
Published
1999-11-01
Updated
2022-08-17
A remote attacker can read information from a Netscape user's cache via JavaScript.
Max CVSS
2.6
EPSS Score
0.79%
Published
2000-04-01
Updated
2008-09-09
When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information.
Max CVSS
2.6
EPSS Score
0.27%
Published
1999-05-24
Updated
2022-08-17
talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
Max CVSS
2.1
EPSS Score
0.04%
Published
1999-03-18
Updated
2022-08-17
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.
Max CVSS
2.6
EPSS Score
21.53%
Published
1997-07-08
Updated
2021-07-22
11 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!