Page 83 of 840 results (0.005 seconds)

CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0

06 May 1999 — Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users. • http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

06 May 1999 — Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object. • http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html •

CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 1

01 May 1999 — The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files. • https://www.exploit-db.com/exploits/19094 •

CVSS: 8.1EPSS: 1%CPEs: 4EXPL: 0

21 Apr 1999 — Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012 •

CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0

21 Apr 1999 — MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

09 Apr 1999 — Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012 •

CVSS: 5.0EPSS: 85%CPEs: 1EXPL: 0

01 Apr 1999 — Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0469 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

23 Mar 1999 — The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs. • http://marc.info/?l=ntbugtraq&m=92220197414799&w=2 •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 2

02 Feb 1999 — Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object. • https://www.exploit-db.com/exploits/19164 •

CVSS: 4.3EPSS: 2%CPEs: 7EXPL: 1

01 Dec 1998 — Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing. • https://www.exploit-db.com/exploits/19662 •