CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2000-1187
https://notcve.org/view.php?id=CVE-2000-1187
09 Jan 2001 — Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:66.netscape.asc •
CVSS: 7.5EPSS: 25%CPEs: 14EXPL: 2CVE-2000-0676 – Netscape Communicator 4.x - URL Read
https://notcve.org/view.php?id=CVE-2000-0676
13 Oct 2000 — Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice. • https://www.exploit-db.com/exploits/20140 •
CVSS: 7.5EPSS: 5%CPEs: 18EXPL: 2CVE-2000-0711 – Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket
https://notcve.org/view.php?id=CVE-2000-0711
13 Oct 2000 — Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice. • https://www.exploit-db.com/exploits/20139 •
CVSS: 9.8EPSS: 15%CPEs: 14EXPL: 2CVE-2000-0655 – Netscape Communicator 4.x - JPEG-Comment Heap Overwrite
https://notcve.org/view.php?id=CVE-2000-0655
25 Jul 2000 — Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1. • https://www.exploit-db.com/exploits/20098 •
CVSS: 5.3EPSS: 1%CPEs: 8EXPL: 0CVE-2000-0517
https://notcve.org/view.php?id=CVE-2000-0517
26 May 2000 — Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information. • http://www.cert.org/advisories/CA-2000-08.html •
CVSS: 2.6EPSS: 0%CPEs: 11EXPL: 0CVE-2000-0406
https://notcve.org/view.php?id=CVE-2000-0406
10 May 2000 — Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability. • http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt •
CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 1CVE-2000-0409 – Netscape Communicator 4.5/4.51/4.6/4.61/4.7/4.72/4.73 - '/tmp' Symlink
https://notcve.org/view.php?id=CVE-2000-0409
10 May 2000 — Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate. • https://www.exploit-db.com/exploits/19912 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-1999-0790
https://notcve.org/view.php?id=CVE-1999-0790
01 Apr 2000 — A remote attacker can read information from a Netscape user's cache via JavaScript. • http://home.netscape.com/security/notes/jscachebrowsing.html •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1002
https://notcve.org/view.php?id=CVE-1999-1002
12 Jan 2000 — Netscape Navigator uses weak encryption for storing a user's Netscape mail password. • http://marc.info/?l=bugtraq&m=94536309217214&w=2 •
CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0CVE-2000-0087
https://notcve.org/view.php?id=CVE-2000-0087
12 Jan 2000 — Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext. • http://marc.info/?l=bugtraq&m=94790377622943&w=2 •