Where
-Infinity
0

Trending

Last week
Last month
Last year

Supermicro X11SSM-FXSS

Risk 52
Severity
8.3
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.

First published (updated )
CVE-2023-40290

debian/ldap-account-managerMissing Encryption of Sensitive Data in ldap-account-manager

Risk 38
Severity
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by configuration. This issue has been fixed in version 8.0. Users unable to upgrade should install the PHP OpenSSL extension and make sure session encryption is enabled in LAM main configuration.

First published (updated )
CVE-2022-31085

SolarWinds Orion PlatformStored XSS via Help Server settings

Risk 45
Severity
6.5
XSS
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'.

Remedy

SolarWinds recommends installing 2020.2.6 Hotfix 1 for the Orion Platform as soon as it becomes available. All customers should implement all the recommendations from the Orion Secure Configuration Guide.
First published (updated )
CVE-2021-35240

Microsoft Internet ExplorerScripting Engine Memory Corruption Vulnerability

Risk 67
Severity
7.6
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Scripting Engine Memory Corruption Vulnerability

First published (updated )
CVE-2021-26419

Microsoft EdgeMicrosoft Browser Memory Corruption Vulnerability

Risk 67
Severity
7.6
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Microsoft Browser Memory Corruption Vulnerability

First published (updated )
CVE-2020-17058
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Internet ExplorerInternet Explorer Memory Corruption Vulnerability

Risk 67
Severity
7.6
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Internet Explorer Memory Corruption Vulnerability

First published (updated )
CVE-2020-17053

Microsoft Internet ExplorerScripting Engine Memory Corruption Vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Scripting Engine Memory Corruption Vulnerability

First published (updated )
CVE-2020-17052

PrismJS Previewers PrismjsCross-Site Scripting in Prism

Risk 56
Severity
7.5
XSS
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism >=v1.1.0 that use the Previewers plugin (>=v1.10.0) or the Previewer: Easing plugin (v1.1.0 to v1.9.0). This problem is fixed in version 1.21.0. To workaround the issue without upgrading, disable the easing preview on all impacted code blocks. You need Prism v1.10.0 or newer to apply this workaround.

First published (updated )
CVE-2020-15138

Microsoft Internet ExplorerAn information disclosure vulnerability exists when Skype for Business is accessed via Internet Expl…

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'.

First published (updated )
CVE-2020-1432

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

First published (updated )
CVE-2020-1403
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Internet ExplorerAn information disclosure vulnerability exists when Internet Explorer improperly handles objects in …

Risk 31
Severity
5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.

First published (updated )
CVE-2020-1315

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230.

First published (updated )
CVE-2020-1260

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1260.

First published (updated )
CVE-2020-1230

Microsoft ChakraMicrosoft Chakra Intl Object Type Confusion Remote Code Execution Vulnerability

Risk 68
Severity
7.6
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.

1 / 2
First published (updated )
CVE-2020-1219

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1230, CVE-2020-1260.

First published (updated )
CVE-2020-1216
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.

First published (updated )
CVE-2020-1215

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.

First published (updated )
CVE-2020-1214

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.

First published (updated )
CVE-2020-1213

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1060.

First published (updated )
CVE-2020-1093

Microsoft Internet ExplorerA remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m…

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1062.

First published (updated )
CVE-2020-1092
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the MSHTML engine improperly validates …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'.

First published (updated )
CVE-2020-1064

Microsoft Internet ExplorerA remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m…

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1092.

First published (updated )
CVE-2020-1062

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1093.

First published (updated )
CVE-2020-1060

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1060, CVE-2020-1093.

First published (updated )
CVE-2020-1058

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1058, CVE-2020-1060, CVE-2020-1093.

First published (updated )
CVE-2020-1035
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 79
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966.

First published (updated )
CVE-2020-0967

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 79
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967.

First published (updated )
CVE-2020-0966

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.

First published (updated )
CVE-2020-0895

Invisioncommunity Invision Power BoardXSS

Risk 38
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.

First published (updated )
CVE-2009-5159

Microsoft Internet ExplorerA remote code execution vulnerability exists in the way that the VBScript engine handles objects in …

Risk 67
Severity
7.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

First published (updated )
CVE-2020-0847
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203