CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 0CVE-2003-1326
https://notcve.org/view.php?id=CVE-2003-1326
19 Feb 2003 — Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box." Microsoft Internet Explorer 5.01, 5.5 y 6.0 permite a atacantes remotos evitar el modelo de seguridad entre dominios (cros-domain) para correr script malicioso o programas arbitrarios mediante cuadros de díálogo. También conocida como "Validacíon de Seguridad Entre Dominios in... • http://www.ciac.org/ciac/bulletins/n-038.shtml •
CVSS: 8.8EPSS: 20%CPEs: 9EXPL: 1CVE-2003-1328 – Microsoft Internet Explorer 5 - ShowHelp Arbitrary Command Execution
https://notcve.org/view.php?id=CVE-2003-1328
19 Feb 2003 — The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality." La función showHelp() en Microsoft Internet Explorer 5.5 y 6.0 soporta ciertos tipos de protocolos enchufables (añadibles) qeu permiten a atacantes remotos evitar el modelo de seguridad de cruce de dominios y ejecutar... • https://www.exploit-db.com/exploits/22226 •
CVSS: 8.1EPSS: 2%CPEs: 4EXPL: 2CVE-2002-1688 – Microsoft Internet Explorer 5.5/6.0 - History List Script Injection
https://notcve.org/view.php?id=CVE-2002-1688
31 Dec 2002 — The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button. • https://www.exploit-db.com/exploits/21376 •
CVSS: 7.4EPSS: 0%CPEs: 3EXPL: 0CVE-2002-2125
https://notcve.org/view.php?id=CVE-2002-2125
31 Dec 2002 — Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack. • http://www.iss.net/security_center/static/10180.php •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2002-1670
https://notcve.org/view.php?id=CVE-2002-1670
31 Dec 2002 — Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explorer unpatched. • http://online.securityfocus.com/archive/1/250596 •
CVSS: 5.3EPSS: 2%CPEs: 7EXPL: 4CVE-2002-2031 – Microsoft Internet Explorer 5 - JavaScript Local File Enumeration
https://notcve.org/view.php?id=CVE-2002-2031
31 Dec 2002 — Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results. • https://www.exploit-db.com/exploits/21198 •
CVSS: 6.1EPSS: 92%CPEs: 4EXPL: 4CVE-2002-2062 – Microsoft Internet Explorer 5/6 - FTP Web View Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2002-2062
31 Dec 2002 — Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view for FTP sites" and "Enable Web content in folders" selected, allows remote attackers to inject arbitrary web script or HTML via the hostname portion of an FTP URL. • https://www.exploit-db.com/exploits/21515 •
CVSS: 7.4EPSS: 0%CPEs: 2EXPL: 0CVE-2002-1824
https://notcve.org/view.php?id=CVE-2002-1824
31 Dec 2002 — Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and finding a newer certificate, which may allow attackers to perform a man-in-the-middle attack. NOTE: it is not clear whether this poses a vulnerability. • http://online.securityfocus.com/archive/1/292842 •
CVSS: 5.3EPSS: 1%CPEs: 4EXPL: 1CVE-2002-1671
https://notcve.org/view.php?id=CVE-2002-1671
31 Dec 2002 — Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of the clipboardData object. • http://online.securityfocus.com/archive/1/250387/2002-10-11/2002-10-17/2 •
CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 1CVE-2002-1984
https://notcve.org/view.php?id=CVE-2002-1984
31 Dec 2002 — Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046". • http://seclists.org/bugtraq/2002/Jun/0303.html •