Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-1999-1093 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.
CVE-1999-1087 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote ma...Show more Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.Show less
CVE-1999-1084 1Microsoft 1Windows Nt Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.
CVE-1999-1055 1Microsoft 1Excel Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnera...Show more Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."Show less
CVE-1999-1043 1Microsoft 1Exchange Server Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).
CVE-1999-1035 1Microsoft 1Internet Information Server Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability.
CVE-1999-0815 1Microsoft 1Windows Nt Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries.
CVE-1999-0154 1Microsoft 2Internet Information Server Internet Information Services Apr 16, 2026 Dec 31, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
CVE-2000-0100 1Microsoft 1Systems Management Server Apr 16, 2026 Dec 29, 1999 N/A· v4 N/A· v3 7.2 HIGH· v2 The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
CVE-2000-0028 1Microsoft 2Ie Internet Explorer Apr 16, 2026 Dec 23, 1999 N/A· v4 N/A· v3 2.6 LOW· v2 Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
CVE-2000-0036 1Microsoft 2Ie Outlook Express Apr 16, 2026 Dec 22, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.
CVE-2000-0025 1Microsoft 3Internet Information Server Site ServerSite Server Commerce Apr 16, 2026 Dec 21, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory...Show more IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.Show less
CVE-2000-0024 1Microsoft 3Internet Information Server Site ServerSite Server Commerce Apr 16, 2026 Dec 21, 1999 N/A· v4 N/A· v3 6.4 MEDIUM· v2 IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
CVE-1999-0995 1Microsoft 1Windows Nt Apr 16, 2026 Dec 16, 1999 N/A· v4 N/A· v3 7.8 HIGH· v2 Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
CVE-1999-0994 1Microsoft 1Windows Nt Apr 16, 2026 Dec 16, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
CVE-1999-0993 1Microsoft 1Exchange Server Apr 16, 2026 Dec 13, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
CVE-1999-0975 1Microsoft 3Windows 95 Windows 98Windows Nt Apr 16, 2026 Dec 10, 1999 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when...Show more The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.Show less
CVE-1999-0981 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 8, 1999 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
CVE-1999-0989 1Microsoft 1Ie Apr 16, 2026 Dec 6, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.
CVE-1999-0858 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 2, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.

Previous 1...737738739...748 Next