Microsoft Internet Information Services vulnerabilities

• microsoft internet information services (iis), internet information services +1 more Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet... CVE-2017-7269 In KEVPublic exploit EPSS 99.8% 9.8 CriticalMarch 27, 2017
• microsoft internet information services The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not... CVE-2014-4078 EPSS 20.1% 5.1 MediumNovember 11, 2014
• microsoft internet information services CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services... CVE-2011-5279 EPSS 19.6% 5.0 MediumApril 23, 2014
• microsoft internet information services Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in... CVE-2010-3972 Public exploit EPSS 94.5% 10.0 HighDecember 23, 2010
• microsoft internet information services Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled,... CVE-2010-2730 EPSS 32.8% 9.3 HighSeptember 15, 2010
• microsoft internet information services, internet information server +1 more Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information... CVE-2010-1899 Public exploit EPSS 57.2% 4.3 MediumSeptember 15, 2010
• microsoft internet information services Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third... CVE-2009-4445 EPSS 12.8% 6.0 MediumDecember 29, 2009
• microsoft internet information services Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename... CVE-2009-4444 EPSS 63.6% 6.0 MediumDecember 29, 2009
• microsoft internet information services Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services ... CVE-2009-2521 Public exploit EPSS 82.3% 5.0 MediumSeptember 4, 2009
• microsoft internet information services The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4... CVE-2009-1122 Public exploit EPSS 98.4% 7.5 HighJune 10, 2009
• microsoft internet information services The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote... CVE-2009-1535 Public exploit EPSS 98.1% 7.5 HighJune 10, 2009
• microsoft internet information services The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the... CVE-2003-1567 EPSS 25.2% 5.8 MediumJanuary 15, 2009
• microsoft internet information services Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method... CVE-2003-1566 Public exploit EPSS 28.1% 5.0 MediumJanuary 15, 2009
• microsoft internet information services Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet... CVE-2008-1446 EPSS 46.3% 9.0 HighOctober 15, 2008
• microsoft internet information services ** DISPUTED ** A certain ActiveX control in iisext.dll in Microsoft Internet Information... CVE-2008-4301 Disputed EPSS 17.1% 10.0 HighSeptember 29, 2008
• microsoft internet information services A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows... CVE-2008-4300 EPSS 13.6% 5.0 MediumSeptember 29, 2008
• microsoft internet information services, internet information server +1 more Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows... CVE-2008-0074 7.2 HighFebruary 12, 2008
• microsoft internet information services The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services ... CVE-2007-2815 Public exploit EPSS 73.4% 10.0 HighMay 22, 2007
• microsoft internet information server, internet information services +1 more Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for ... CVE-2006-6579 4.4 MediumDecember 15, 2006
• microsoft internet information services Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non... CVE-2006-6578 7.5 HighDecember 15, 2006
• microsoft internet information services, internet information server +1 more Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local... CVE-2006-0026 Public exploit EPSS 89.3% 6.5 MediumJuly 11, 2006
• microsoft internet information services The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional... CVE-2005-4360 Public exploit EPSS 86.7% 7.8 HighDecember 20, 2005
• microsoft internet information server, internet information services +1 more Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass... CVE-2005-2678 EPSS 44.4% 5.0 MediumAugust 23, 2005
• microsoft internet information services Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application... CVE-2005-2089 EPSS 31.0% 4.3 MediumJune 30, 2005
• microsoft internet information services, internet information server +1 more The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows... CVE-2003-0718 Public exploit EPSS 87.9% 5.0 MediumOctober 16, 2004
• microsoft internet information services Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a... CVE-2003-0226 Public exploit EPSS 43.2% 5.0 MediumMay 30, 2003
• microsoft internet information server, internet information services +1 more The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0... CVE-2003-0225 EPSS 38.5% 5.0 MediumMay 30, 2003
• microsoft internet information services Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local... CVE-2003-0224 EPSS 18.3% 10.0 HighMay 30, 2003
• microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in... CVE-2003-0223 EPSS 17.3% 6.8 MediumMay 30, 2003
• microsoft internet information services Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption)... CVE-2002-1908 EPSS 13.7% 5.0 MediumDecember 31, 2002
• microsoft internet information services, exchange server, internet information server +2 more The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote... CVE-2002-1790 Public exploit EPSS 34.0% 5.0 MediumDecember 31, 2002
• microsoft internet information services Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers... CVE-2002-1745 EPSS 19.1% 7.5 HighDecember 31, 2002
• microsoft internet information services Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to... CVE-2002-1744 Public exploit EPSS 65.2% 5.0 MediumDecember 31, 2002
• microsoft internet information services Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents... CVE-2002-1718 EPSS 14.9% 5.0 MediumDecember 31, 2002
• microsoft internet information services Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information... CVE-2002-1717 EPSS 16.1% 5.0 MediumDecember 31, 2002
• macromedia coldfusion, microsoft internet information services, windows 2000 +2 more Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion... CVE-2002-1700 Public exploit EPSS 24.3% 4.3 MediumDecember 31, 2002
• symantec norton internet security, microsoft internet information server, internet information services +2 more Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE... CVE-2002-1695 EPSS 13.6% 5.0 MediumDecember 31, 2002
• microsoft internet information server, internet information services +1 more Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and... CVE-2002-1694 EPSS 13.0% 5.0 MediumDecember 31, 2002
• microsoft internet information services IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV... CVE-2002-1182 EPSS 36.1% 5.0 MediumNovember 12, 2002
• microsoft internet information services A typographical error in the script source access permissions for Internet Information Server ... CVE-2002-1180 7.5 HighNovember 12, 2002
• microsoft internet information server, internet information services +1 more Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft... CVE-2002-1181 EPSS 39.4% 6.8 MediumNovember 2, 2002
• microsoft internet information server, internet information services +1 more Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information... CVE-2002-0869 EPSS 23.6% 7.5 HighNovember 2, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to... CVE-2002-0364 EPSS 33.8% 7.5 HighJuly 3, 2002
• microsoft internet information services IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP... CVE-2002-0422 EPSS 51.0% 2.6 LowJune 11, 2002
• microsoft internet information server, internet information services +1 more Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive... CVE-2002-0419 Public exploit EPSS 37.3% 5.0 MediumJune 11, 2002
• microsoft sql server, windows 2000, internet information services +2 more The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000,... CVE-2002-0224 EPSS 29.3% 5.0 MediumMay 3, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to... CVE-2002-0150 EPSS 52.9% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote... CVE-2002-0149 EPSS 68.8% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows... CVE-2002-0148 Public exploit EPSS 65.5% 7.5 HighApril 22, 2002
• microsoft internet information server, internet information services +1 more Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0,... CVE-2002-0147 EPSS 68.0% 7.5 HighApril 22, 2002
• Show olderLoading…