Page 13 of 63 results (0.002 seconds)

CVSS: 7.5EPSS: 4%CPEs: 1EXPL: 0

Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "HTTP Request Encoding vulnerability." • http://www.osvdb.org/1972 http://www.securityfocus.com/bid/3421 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051 https://exchange.xforce.ibmcloud.com/vulnerabilities/7259 •

CVSS: 2.6EPSS: 0%CPEs: 14EXPL: 0

Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities. • http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt http://www.cert.org/advisories/CA-2000-10.html http://www.securityfocus.com/bid/1309 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039 https://exchange.xforce.ibmcloud.com/vulnerabilities/4624 •

CVSS: 2.6EPSS: 0%CPEs: 14EXPL: 0

Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities. • http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt http://www.cert.org/advisories/CA-2000-10.html http://www.securityfocus.com/bid/1309 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039 https://exchange.xforce.ibmcloud.com/vulnerabilities/4627 •