Netscape 漏洞

时间轴

类型

Web Browser54
Not Defined39
Web Server30
Directory Service Software6
Programming Language Software1

产品

Netscape Enterprise Server28
Netscape Communicator28
Netscape Navigator26
Netscape Browser15
Netscape Directory Server6

修正

Official Fix82
Temporary Fix0
Workaround10
Unavailable8
Not Defined32

易受攻击性

High2
Functional1
Proof-of-Concept33
Unproven3
Not Defined93

访问向量

Not Defined0
Physical0
Local23
Adjacent0
Network109

身份验证

Not Defined0
High0
Low19
None113

用户交互

Not Defined0
Required5
None127

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤417
≤53
≤655
≤710
≤833
≤94
≤1010

CVSSv3 Temp

≤10
≤20
≤30
≤417
≤515
≤648
≤729
≤812
≤93
≤108

VulDB

≤10
≤20
≤30
≤417
≤54
≤654
≤710
≤833
≤94
≤1010

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤91
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k1
<2k62
<5k56
<10k1
<25k6
<50k5
<100k1
≥100k0

本日攻击

<1k132
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (27): Browser (15), Certificate Management System (1), Certificate Server (1), Collabra Server (2), Communicator (28), Directory Server (6), Enterprise (1), Enterprise Administration Server (1), Enterprise Server (28), Enterprise Web Server (1), FastTrack (1), Fasttrack Server (1), Javascript (1), Messaging Server (3), Messanger (1), Navigator (26), Network Security Services Library (1), Portable Runtime (2), Professional Services FTP Server (1), PublishingXpert (1), Server (1), SmartDownload (1), Web Publishing (3), iPlanet Enterprise Server (1), iPlanet Web Server (1), iPlanet iCal (4), navigator (1)

Link to Vendor Website: https://www.netscape.com/

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2019-01-315.25.2Netscape Enterprise SnoopServlet Reflected 跨网站脚本未知Not DefinedUnavailable0.003010.00CVE-2018-18940
2016-08-078.68.2Netscape Portable Runtime prprf.c PR_*printf 内存损坏未知Not DefinedOfficial Fix0.025480.02CVE-2016-1951
2014-06-1010.08.7Netscape Portable Runtime 内存损坏未知UnprovenOfficial Fix0.069780.00CVE-2014-1545
2009-07-205.35.3Netscape Navigator 拒绝服务Web BrowserHighUnavailable0.030080.02CVE-2009-2542
2008-07-077.36.4Netscape Certificate Management System 权限升级未知UnprovenOfficial Fix0.009120.00CVE-2008-1676
2007-07-257.37.3Netscape Navigator Telnet 权限升级Web BrowserNot DefinedNot Defined0.011590.00CVE-2007-4042
2007-07-209.89.8Netscape navigator Protocol netscape.exe 权限升级Web BrowserNot DefinedNot Defined0.001670.03CVE-2007-3924
2007-03-095.34.8Netscape Navigator acropdf.dll 拒绝服务Web BrowserProof-of-ConceptUnavailable0.007500.00CVE-2007-1377
2006-06-066.56.2Netscape Browser Javascript OnKeyPress 权限升级未知Proof-of-ConceptOfficial Fix0.063370.04CVE-2006-2894
2006-05-255.35.1Netscape Navigator Installation 信息公开Web BrowserNot DefinedOfficial Fix0.007230.00CVE-2006-2613
2005-10-185.35.0Netscape Javascript Link Tag 拒绝服务Programming Language SoftwareProof-of-ConceptNot Defined0.000000.00
2005-09-085.65.1Netscape Browser Host URL BuildNormalizedSpec 内存损坏未知Proof-of-ConceptOfficial Fix0.964170.00CVE-2005-2871
2005-05-237.36.6Netscape Browser InstallTrigger.install Remote Code Execution未知Proof-of-ConceptOfficial Fix0.928990.00CVE-2005-1476
2005-05-236.35.7Netscape Browser IFRAME Javascript URL 跨网站脚本未知Proof-of-ConceptOfficial Fix0.928990.00CVE-2005-1476
2005-04-267.36.6Netscape Browser Netscape Extension 内存损坏未知Proof-of-ConceptOfficial Fix0.940840.00CVE-2005-0399
2005-04-196.35.7Netscape Browser Search Plugin 权限升级未知Proof-of-ConceptOfficial Fix0.009370.00CVE-2005-1156
2005-04-045.65.3Netscape Browser Javascript Lambda Symbol 内存损坏未知Proof-of-ConceptOfficial Fix0.923710.00CVE-2005-0989
2005-02-095.35.0Netscape Browser URI 内存损坏未知Proof-of-ConceptOfficial Fix0.005390.00CVE-2005-0232
2005-02-097.36.9Netscape Browser URI Drag / Drop 内存损坏未知Proof-of-ConceptOfficial Fix0.004940.00CVE-2005-0231
2005-02-096.56.2Netscape Browser Drag / Drop HTTP Content-Disposition 权限升级未知Proof-of-ConceptOfficial Fix0.574960.00CVE-2005-0230
2005-02-065.04.7Netscape Browser IDN International Domain Name Privilege Escalation未知Proof-of-ConceptOfficial Fix0.000000.00
2005-01-117.37.0Netscape Directory Server LDAP 内存损坏Directory Service SoftwareNot DefinedOfficial Fix0.109740.02CVE-2004-1236
2005-01-107.37.0Netscape Navigator 弱身份验证Web BrowserNot DefinedOfficial Fix0.013870.00CVE-2004-1160
2004-10-203.73.5Netscape Browser Tabs Browsing Dialogbox 弱身份验证未知Proof-of-ConceptOfficial Fix0.001900.00CVE-2004-1380
2004-08-237.36.6Netscape Network Security Services Library SSL2 Hello Message 内存损坏Software LibraryProof-of-ConceptOfficial Fix0.018040.02CVE-2004-0826

107 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 107 results.

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!