| CVE-2003-1560 | TRUNG BÌNH5.0 | Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data. | 31/12/2003 |
| CVE-2003-1492 | TRUNG BÌNH5.0 | Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end. | 31/12/2003 |
| CVE-2003-1419 | TRUNG BÌNH4.3 | Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the JavaScript reformatDate function. | 31/12/2003 |
| CVE-2003-1265 | THẤP2.1 | Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted messages. | 31/12/2003 |
| CVE-2003-0553 | CAO7.5 | Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename. | 18/08/2003 |
| CVE-2002-2338 | TRUNG BÌNH5.0 | The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message. | 31/12/2002 |
| CVE-2002-2061 | CAO7.5 | Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width and height values and an 8-bit or 16-bit alpha channel. | 31/12/2002 |
| CVE-2002-2013 | TRUNG BÌNH5.0 | Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain. | 31/12/2002 |
| CVE-2002-1308 | CAO7.5 | Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression. | 29/11/2002 |
| CVE-2002-1091 | CAO7.5 | Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width. | 04/10/2002 |
| CVE-2002-0354 | TRUNG BÌNH5.0 | The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property. | 25/06/2002 |
| CVE-2002-0594 | TRUNG BÌNH5.0 | Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect. | 18/06/2002 |
| CVE-2002-0593 | CAO7.5 | Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI. | 18/06/2002 |
| CVE-2000-1187 | CAO7.5 | Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field. | 09/01/2001 |
| CVE-1999-1189 | CAO7.5 | Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file. | 24/11/1999 |
| CVE-1999-0827 | THẤP2.6 | By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing. | 01/11/1999 |
| CVE-1999-0440 | CAO7.5 | The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. | 01/03/1999 |
| CVE-1999-0141 | THẤP3.7 | Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet. | 29/03/1996 |