Microsoft Internet Information Server vulnerabilities

• microsoft internet information services, internet information server +1 more Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information... CVE-2010-1899 Public exploit EPSS 57.2% 4.3 MediumSeptember 15, 2010
• microsoft internet information server Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for... CVE-2010-1256 EPSS 28.2% 8.5 HighJune 8, 2010
• microsoft internet information server Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP... CVE-2003-1582 EPSS 10.3% 2.6 LowFebruary 5, 2010
• microsoft internet information server Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6... CVE-2009-3023 Public exploit EPSS 90.9% 9.0 HighAugust 31, 2009
• microsoft internet information server Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows... CVE-2008-0075 EPSS 57.2% 10.0 HighFebruary 12, 2008
• microsoft internet information services, internet information server +1 more Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows... CVE-2008-0074 7.2 HighFebruary 12, 2008
• microsoft internet information server Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of... CVE-2007-2897 EPSS 74.0% 7.5 HighMay 30, 2007
• microsoft internet information server ** DISPUTED ** Microsoft Internet Information Services (IIS), when accessed through a TCP... CVE-2007-0087 Disputed EPSS 24.4% 7.8 HighJanuary 5, 2007
• microsoft internet information server, internet information services +1 more Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for ... CVE-2006-6579 4.4 MediumDecember 15, 2006
• microsoft internet information services, internet information server +1 more Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local... CVE-2006-0026 Public exploit EPSS 89.3% 6.5 MediumJuly 11, 2006
• microsoft internet information server, internet information services +1 more Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass... CVE-2005-2678 EPSS 44.4% 5.0 MediumAugust 23, 2005
• microsoft internet information services, internet information server +1 more The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows... CVE-2003-0718 Public exploit EPSS 87.9% 5.0 MediumOctober 16, 2004
• microsoft internet information server, avaya definity one media server, ip600 media servers +2 more +4 more Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute... CVE-2004-0205 EPSS 24.5% 7.2 HighJuly 14, 2004
• microsoft internet information server, internet information services +1 more The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0... CVE-2003-0225 EPSS 38.5% 5.0 MediumMay 30, 2003
• microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in... CVE-2003-0223 EPSS 17.3% 6.8 MediumMay 30, 2003
• microsoft internet information services, exchange server, internet information server +2 more The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote... CVE-2002-1790 Public exploit EPSS 34.0% 5.0 MediumDecember 31, 2002
• symantec norton internet security, microsoft internet information server, internet information services +2 more Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE... CVE-2002-1695 EPSS 13.6% 5.0 MediumDecember 31, 2002
• microsoft internet information server, internet information services +1 more Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and... CVE-2002-1694 EPSS 13.0% 5.0 MediumDecember 31, 2002
• microsoft internet information server, internet information services +1 more Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft... CVE-2002-1181 EPSS 39.4% 6.8 MediumNovember 2, 2002
• microsoft internet information server, internet information services +1 more Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information... CVE-2002-0869 EPSS 23.6% 7.5 HighNovember 2, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to... CVE-2002-0364 EPSS 33.8% 7.5 HighJuly 3, 2002
• microsoft internet information server, internet information services +1 more Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive... CVE-2002-0419 Public exploit EPSS 37.3% 5.0 MediumJune 11, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to... CVE-2002-0150 EPSS 52.9% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote... CVE-2002-0149 EPSS 68.8% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows... CVE-2002-0148 Public exploit EPSS 65.5% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0,... CVE-2002-0147 EPSS 68.0% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4... CVE-2002-0079 Public exploit EPSS 78.0% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows... CVE-2002-0075 EPSS 36.8% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability in Help File search facility for Internet Information Server ... CVE-2002-0074 EPSS 36.8% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have... CVE-2002-0073 EPSS 59.7% 5.0 MediumApril 22, 2002
• microsoft internet information server, internet information services +1 more The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information... CVE-2002-0072 EPSS 63.5% 5.0 MediumApril 22, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet... CVE-2002-0071 EPSS 36.6% 7.5 HighApril 22, 2002
• microsoft internet information server IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash)... CVE-2001-0545 EPSS 18.3% 5.0 MediumOctober 30, 2001
• microsoft internet information server, internet information services +1 more Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via... CVE-2001-0506 Public exploit EPSS 68.9% 7.2 HighSeptember 20, 2001
• microsoft internet information server Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to... CVE-2001-0709 EPSS 35.6% 5.0 MediumAugust 29, 2001
• microsoft index server, indexing service, internet information server +2 more Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS... CVE-2001-0500 Public exploit EPSS 96.7% 10.0 HighJuly 21, 2001
• microsoft internet information server, internet information services +1 more Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote... CVE-2001-1243 Public exploit EPSS 70.5% 5.0 MediumJuly 4, 2001
• microsoft internet information server The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers... CVE-2001-0336 Public exploit EPSS 15.9% 5.0 MediumJune 27, 2001
• microsoft internet information server FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted... CVE-2001-0335 EPSS 21.0% 5.0 MediumJune 27, 2001
• microsoft internet information server FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a... CVE-2001-0334 EPSS 14.7% 7.5 HighJune 27, 2001
• microsoft internet information server Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute... CVE-2001-0333 Public exploit EPSS 90.8% 7.5 HighJune 27, 2001
• microsoft internet information server The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which... CVE-2001-0337 5.0 MediumMay 24, 2001
• microsoft internet information server, internet information services +1 more FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial... CVE-2001-0096 EPSS 20.3% 5.0 MediumFebruary 12, 2001
• microsoft internet information server, internet information services +1 more IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server... CVE-2001-0004 EPSS 28.2% 5.0 MediumFebruary 12, 2001
• microsoft internet information server Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for... CVE-2000-1090 EPSS 16.7% 5.0 MediumFebruary 2, 2001
• microsoft internet information server Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary... CVE-2000-1147 Public exploit 4.6 MediumDecember 19, 2000
• microsoft internet information server, internet information services +1 more Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 ... CVE-2000-1104 7.5 HighDecember 19, 2000
• microsoft internet information server, internet information services +1 more IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions,... CVE-2000-0970 EPSS 45.7% 7.5 HighDecember 19, 2000
• microsoft internet information server, internet information services +1 more IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an... CVE-2000-0886 Public exploit EPSS 68.7% 7.5 HighDecember 19, 2000
• microsoft internet information server, internet information services +1 more IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly... CVE-2000-0884 Public exploit EPSS 63.3% 7.5 HighDecember 19, 2000
• Show olderLoading…