Page 18 of 90 results (0.010 seconds)

CVSS: 7.5EPSS: 6%CPEs: 13EXPL: 1

CVE-2002-1091

https://notcve.org/view.php?id=CVE-2002-1091

Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width. • http://bugzilla.mozilla.org/show_bug.cgi?id=157989 http://crash.ihug.co.nz/~Sneuro/zerogif http://marc.info/?l=bugtraq&m=103134051120770&w=2 http://www.iss.net/security_center/static/10058.php http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075 http://www.redhat.com/support/errata/RHSA-2002-192.html http://www.redhat.com/support/errata/RHSA-2003-046.html http://www.securityfocus.com/bid/5665 https://access.redhat.com/security/cve/CVE-2002-1091 h •

CVSS: 2.6EPSS: 0%CPEs: 12EXPL: 1

CVE-2002-1126

https://notcve.org/view.php?id=CVE-2002-1126

Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler. • http://bugzilla.mozilla.org/show_bug.cgi?id=145579 http://marc.info/?l=bugtraq&m=103176760004720&w=2 http://www.iss.net/security_center/static/10084.php http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075 http://www.redhat.com/support/errata/RHSA-2002-192.html http://www.redhat.com/support/errata/RHSA-2003-046.html http://www.securityfocus.com/bid/5694 https://access.redhat.com/security/cve/CVE-2002-1126 https://bugzilla.redhat.com/show_bug.cgi?id= •

CVSS: 5.0EPSS: 1%CPEs: 10EXPL: 1

CVE-2002-0594

https://notcve.org/view.php?id=CVE-2002-0594

Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490 http://online.securityfocus.com/archive/1/270249 http://www.iss.net/security_center/static/8977.php http://www.redhat.com/support/errata/RHSA-2002-192.html http://www.redhat.com/support/errata/RHSA-2003-046.html http://www.securityfocus.com/bid/4640 https://access.redhat.com/security/cve/CVE-2002-0594 https://bugzilla.redhat.com/show_bug.cgi?id=1616782 •

CVSS: 7.5EPSS: 1%CPEs: 5EXPL: 1

CVE-2002-0593

https://notcve.org/view.php?id=CVE-2002-0593

Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490 http://online.securityfocus.com/archive/1/270249 http://secunia.com/advisories/8039 http://www.iss.net/security_center/static/8976.php http://www.securityfocus.com/bid/4637 https://access.redhat.com/security/cve/CVE-2002-0593 https://bugzilla.redhat.com/show_bug.cgi?id=1616781 •

CVSS: 5.0EPSS: 0%CPEs: 7EXPL: 0

CVE-2002-0354

https://notcve.org/view.php?id=CVE-2002-0354

The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property. • http://marc.info/?l=bugtraq&m=102017952204097&w=2 http://marc.info/?l=ntbugtraq&m=102020343728766&w=2 •