Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2000-0115 1Microsoft 1Internet Information Server Apr 16, 2026 Jan 21, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
CVE-2000-0088 1Microsoft 4Office Office Converter PackPowerpoint+1 more Apr 16, 2026 Jan 20, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability.
CVE-1999-0595 1Microsoft 2Windows 2000 Windows Nt Apr 16, 2026 Jan 20, 2000 N/A· v4 N/A· v3 2.1 LOW· v2 A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
CVE-2000-0070 1Microsoft 1Windows Nt Apr 16, 2026 Jan 12, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."
CVE-2000-0071 1Microsoft 2Internet Information Server Internet Information Services Apr 16, 2026 Jan 11, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
CVE-2000-0081 1Microsoft 1Hotmail Apr 16, 2026 Jan 10, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.
CVE-2000-0061 1Microsoft 1Internet Explorer Apr 16, 2026 Jan 7, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different se...Show more Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.Show less
CVE-2000-0085 1Microsoft 1Hotmail Apr 16, 2026 Jan 4, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
CVE-2000-0053 1Microsoft 1Commercial Internet System Apr 16, 2026 Jan 4, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
CVE-1999-0876 1Microsoft 2Ie Internet Explorer Apr 16, 2026 Jan 4, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Internet Explorer 4.0 via EMBED tag.
CVE-2000-0082 1Microsoft 1Webtv Apr 16, 2026 Jan 2, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
CVE-1999-1591 1Microsoft 2Internet Information Server Visual Interdev Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authe...Show more Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.Show less
CVE-1999-1474 1Microsoft 1Powerpoint Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.
CVE-1999-1473 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue."
CVE-1999-1472 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing...Show more Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.Show less
CVE-1999-1455 1Microsoft 1Windows Nt Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the se...Show more RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.Show less
CVE-1999-1452 1Microsoft 1Windows Nt Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 2.1 LOW· v2 GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
CVE-1999-1451 1Microsoft 2Internet Information Server Site Server Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
CVE-1999-1364 1Microsoft 1Windows Nt Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 2.1 LOW· v2 Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext.
CVE-1999-1363 1Microsoft 1Windows Nt Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 2.1 LOW· v2 Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool.

Previous 1...735736737...748 Next