Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*

part: a version: 5 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductInternet Explorer (bbd5d868-ece4-553d-ad32-7763b4ff07af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2383 vulnerable 2026-06-08 04:58:05.848802 Details available
Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue, aka "Drag and Drop Information Disclosure Vulnerability." NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release.
Published: 2011-06-03T17:00:00.000Z
Updated: 2024-08-06T23:00:33.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2382 vulnerable 2026-06-08 04:58:05.796926 Details available
Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue.
Published: 2011-06-03T17:00:00.000Z
Updated: 2024-09-17T02:41:25.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2379 not_vulnerable 2026-06-08 04:58:05.739696 Details available
Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing.
Published: 2011-08-09T19:00:00.000Z
Updated: 2024-08-06T23:00:33.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1765 not_vulnerable 2026-06-08 04:58:02.006415 Details available
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .shtml at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578 and CVE-2011-1587.
Published: 2011-05-23T22:00:00.000Z
Updated: 2024-08-06T22:37:25.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1578 not_vulnerable 2026-06-08 04:58:00.701736 Details available
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.
Published: 2011-04-27T00:00:00.000Z
Updated: 2024-08-06T22:28:41.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5071 vulnerable 2026-06-08 04:56:31.890031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5159 vulnerable 2026-06-08 04:51:52.215903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4073 vulnerable 2026-06-08 04:51:46.847121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2954 vulnerable 2026-06-08 04:51:31.506535 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2576 vulnerable 2026-06-08 04:51:29.234879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2536 vulnerable 2026-06-08 04:51:29.105683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2069 vulnerable 2026-06-08 04:51:26.588096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2064 vulnerable 2026-06-08 04:51:26.521444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2057 vulnerable 2026-06-08 04:51:26.389538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4381 vulnerable 2026-06-08 04:50:38.762115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1368 vulnerable 2026-06-08 04:50:20.095218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5347 vulnerable 2026-06-08 04:50:04.917827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5344 vulnerable 2026-06-08 04:50:04.904299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4848 vulnerable 2026-06-08 04:49:57.332891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3902 vulnerable 2026-06-08 04:49:55.353592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3341 vulnerable 2026-06-08 04:49:53.739995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1041 vulnerable 2026-06-08 04:47:23.216008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2435 vulnerable 2026-06-08 04:47:19.961192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0596 vulnerable 2026-06-08 04:45:18.407320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0400 vulnerable 2026-06-08 04:44:58.480534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0160 vulnerable 2026-06-08 04:44:58.406845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.