CVEs (1,635)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component. |
Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client. |
The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the...Show more |
Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object. |
2Microsoft Netscape2Internet Explorer NavigatorApr 16, 2026 Dec 1, 1998 N/A· v4 N/A· v3 2.6 LOW· v2 Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing. |
Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste. |
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability. |
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag. |
2Microsoft Netscape2Communicator Internet ExplorerApr 16, 2026 Apr 1, 1998 N/A· v4 N/A· v3 7.5 HIGH· v2 A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc. |
Buffer overflow in Internet Explorer 4.0(1). |
1Microsoft 3Internet Explorer Outlook ExpressWindows ExplorerApr 16, 2026 Nov 1, 1997 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. |
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" opti...Show more |
2Microsoft Netscape2Communicator Internet ExplorerApr 16, 2026 Jul 8, 1997 N/A· v4 N/A· v3 2.6 LOW· v2 JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability. |
Remote command execution in Microsoft Internet Explorer using .lnk and .url files. |
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user. |