Vulnerabilities (CVE)

Filtered by CWE-284
Total 4342 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-2947 1 Microsoft 1 Internet Explorer 2026-06-16 6.8 MEDIUM N/A
Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a (1) location or (2) location.href property, related to incorrect determination of the origin of web script, aka "Window Location Property Cross-Domain Vulnerability." NOTE: according to Microsoft, CVE-2008-2948 and CVE-2008-2949 are duplicates of this issue, probably different attack vectors.
CVE-2001-0781 1 Pi-soft 1 Spoonftp 2026-06-16 7.5 HIGH N/A
Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST.