CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag. |
| 21/04/1999 |
| CVE-1999-0488 | 高危7.5 | Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability. | 21/04/1999 |
| CVE-1999-0468 | 高危8.2 | Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component. | 09/04/1999 |
| CVE-1999-0469 | 中危5.0 | Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client. | 01/04/1999 |
| CVE-1999-1370 | 高危7.2 | The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs. | 23/03/1999 |
| CVE-1999-1453 | 低危2.6 | Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object. | 02/02/1999 |
| CVE-1999-0869 | 低危2.6 | Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing. | 01/12/1998 |
| CVE-1999-0870 | 低危2.6 | Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste. | 01/10/1998 |
| CVE-1999-0871 | 低危2.6 | Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability. | 04/09/1998 |
| CVE-1999-1447 | 中危5.0 | Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag. | 28/07/1998 |
| CVE-1999-0537 | 高危7.5 | A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc. | 01/04/1998 |
| CVE-1999-0331 | 高危7.5 | Buffer overflow in Internet Explorer 4.0(1). | 01/01/1998 |
| CVE-1999-0967 | 严重10.0 | Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. | 01/11/1997 |
| CVE-1999-1446 | 低危2.1 | Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays. | 05/08/1997 |
| CVE-1999-0031 | 低危2.6 | JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability. | 08/07/1997 |
| CVE-1999-0280 | 高危7.5 | Remote command execution in Microsoft Internet Explorer using .lnk and .url files. | 01/04/1997 |
| CVE-1999-1128 | 中危5.1 | Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user. | 01/03/1997 |