Page 38 of 213 results (0.106 seconds)

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015 •

CVSS: 4.6EPSS: 0%CPEs: 3EXPL: 1

Buffer overflow in Windows NT 4.0 help file utility via a malformed help file. • https://www.exploit-db.com/exploits/19209 http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231605 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015 •

CVSS: 2.6EPSS: 0%CPEs: 6EXPL: 0

A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. • http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231304 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-014 •

CVSS: 7.2EPSS: 0%CPEs: 10EXPL: 1

The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges. • https://www.exploit-db.com/exploits/19359 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-008 •

CVSS: 4.6EPSS: 0%CPEs: 6EXPL: 1

Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs. • https://www.exploit-db.com/exploits/19198 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-006 •