Skip to contentMicrosoft Services vulnerabilities
- microsoft internet explorer, xml core services +1 moreRace condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet...CVE-2007-0099EPSS 25.7%9.3 High
- microsoft internet information server, internet information services +1 moreMicrosoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for ...CVE-2006-65794.4 Medium
- microsoft internet information servicesMicrosoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non...CVE-2006-65787.5 High
- microsoft xml core servicesUnspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX...CVE-2006-5745Public exploitEPSS 77.6%7.6 High
- microsoft xml core services, xml parser +1 moreBuffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in...CVE-2006-4686EPSS 30.3%7.5 High
- microsoft xml core services, xml parser +1 moreThe XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0...CVE-2006-4685EPSS 20.7%2.6 Low
- microsoft internet information services, internet information server +1 moreBuffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local...CVE-2006-0026Public exploitEPSS 89.3%6.5 Medium
- microsoft frontpage server extensions, sharepoint team services +1 moreCross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage...CVE-2006-0015Public exploitEPSS 24.6%6.8 Medium
- microsoft internet information servicesThe URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional...CVE-2005-4360Public exploitEPSS 86.7%7.8 High
- microsoft internet information server, internet information services +1 moreMicrosoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass...CVE-2005-2678EPSS 44.4%5.0 Medium
- microsoft internet information servicesMicrosoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application...CVE-2005-2089EPSS 31.0%4.3 Medium
- microsoft windows 2000, windows 2000 terminal services, windows 2003 server +4 more +6 moreMicrosoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary...CVE-2005-1214EPSS 12.8%5.1 Medium
- microsoft windows 2000, windows 2000 terminal services, windows 2003 server +4 more +6 moreBuffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote...CVE-2005-1212EPSS 24.9%7.5 High
- microsoft remote desktop connection, windows terminal services using rdp +1 moreMicrosoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in...CVE-2005-1794Public exploitEPSS 18.0%6.4 Medium
- microsoft sharepoint team services, sharepoint portal server +1 moreWindows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not...CVE-2005-0049EPSS 20.2%4.3 Medium
- microsoft internet information services, internet information server +1 moreThe WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows...CVE-2003-0718Public exploitEPSS 87.9%5.0 Medium
- microsoft windows media servicesUnknown vulnerability in Windows Media Station Service and Windows Media Monitor Service...CVE-2003-0905EPSS 25.8%5.0 Medium
- microsoft sharepoint services, exchange server, windows server 2003 +2 moreMicrosoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication,...CVE-2003-09046.0 Medium
- microsoft frontpage server extensions, sharepoint team services, windows 2000 +1 more +3 moreUnknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server...CVE-2003-0824EPSS 36.5%5.0 Medium
- microsoft frontpage server extensions, sharepoint team services, windows 2000 +1 more +3 moreBuffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server...CVE-2003-0822Public exploitEPSS 83.0%7.5 High
- microsoft windows 2000, windows 2000 terminal services +1 moreMicrosoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL...CVE-2003-0496Public exploit7.2 High
- microsoft internet information servicesMicrosoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a...CVE-2003-0226Public exploitEPSS 43.2%5.0 Medium
- microsoft internet information server, internet information services +1 moreThe ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0...CVE-2003-0225EPSS 38.5%5.0 Medium
- microsoft internet information servicesBuffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local...CVE-2003-0224EPSS 18.3%10.0 High
- microsoft internet information server, internet information services +1 moreCross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in...CVE-2003-0223EPSS 17.3%6.8 Medium
- microsoft windows 2000, windows 2000 terminal services, windows nt +1 more +3 moreBuffer overflow in Windows Kernel allows local users to gain privileges by causing certain error...CVE-2003-01124.6 Medium
- microsoft virtual machine, windows 2000, windows 2000 terminal services +2 moreThe ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as...CVE-2003-0111Public exploitEPSS 35.8%7.5 High
- microsoft windows 2000, windows nt, windows xp +1 more +3 moreThe RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to...CVE-2002-1561Public exploitEPSS 37.7%5.0 Medium
- microsoft windows 2000, windows 2000 terminal services, windows 98 +4 more +6 moreInteger overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript ...CVE-2003-0010EPSS 23.9%7.5 High
- microsoft windows 2000, windows 2000 terminal services +1 moreBuffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition,...CVE-2003-0109Public exploitEPSS 85.7%7.5 High
- microsoft windows 2000, windows nt, windows xp +1 more +3 moreBuffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal...CVE-2003-0003Public exploitEPSS 43.4%7.5 High
- linux kernel, freebsd, microsoft windows 2000 +2 more +4 moreMultiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes,...CVE-2003-0001Public exploitEPSS 72.5%5.0 Medium
- microsoft windows 2000 terminal servicesThe terminal services screensaver for Microsoft Windows 2000 does not automatically lock the...CVE-2002-19337.2 High
- microsoft internet information servicesMicrosoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption)...CVE-2002-1908EPSS 13.7%5.0 Medium
- microsoft internet information services, exchange server, internet information server +2 moreThe SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote...CVE-2002-1790Public exploitEPSS 34.0%5.0 Medium
- microsoft internet information servicesOff-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers...CVE-2002-1745EPSS 19.1%7.5 High
- microsoft internet information servicesDirectory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to...CVE-2002-1744Public exploitEPSS 65.2%5.0 Medium
- microsoft internet information servicesMicrosoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents...CVE-2002-1718EPSS 14.9%5.0 Medium
- microsoft internet information servicesMicrosoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information...CVE-2002-1717EPSS 16.1%5.0 Medium
- macromedia coldfusion, microsoft internet information services, windows 2000 +2 moreCross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion...CVE-2002-1700Public exploitEPSS 24.3%4.3 Medium
- symantec norton internet security, microsoft internet information server, internet information services +2 moreNorton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE...CVE-2002-1695EPSS 13.6%5.0 Medium
- microsoft internet information server, internet information services +1 moreMicrosoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and...CVE-2002-1694EPSS 13.0%5.0 Medium
- microsoft windows 2000, windows 2000 terminal services, windows 95 +5 more +7 moreMicrosoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a...CVE-2002-1325EPSS 13.9%5.0 Medium
- microsoft windows 2000, windows 2000 terminal services, windows 95 +5 more +7 moreThe Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier...CVE-2002-1260EPSS 15.5%7.5 High
- microsoft windows 2000, windows 2000 terminal services, windows 95 +5 more +7 moreMicrosoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to...CVE-2002-1257EPSS 15.3%10.0 High
- microsoft windows 2000, windows xp, windows 2000 terminal services +2 moreThe SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000...CVE-2002-12565.0 Medium
- microsoft windows 2000, windows 2000 terminal services, windows 95 +5 more +7 moreTwo vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used...CVE-2002-1258EPSS 15.3%5.0 Medium
- microsoft internet information servicesIIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV...CVE-2002-1182EPSS 36.1%5.0 Medium
- microsoft internet information servicesA typographical error in the script source access permissions for Internet Information Server ...CVE-2002-11807.5 High
- microsoft windows 2000, windows 2000 terminal services +1 moreNetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows...CVE-2002-1230Public exploit4.6 Medium
- Show moreLoading…