Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2000-0153 1Microsoft 2Frontpage Personal Web Server Apr 16, 2026 Mar 26, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
CVE-1999-1397 1Microsoft 1Index Server Apr 16, 2026 Mar 23, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directori...Show more Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.Show less
CVE-1999-1370 1Microsoft 1Internet Explorer Apr 16, 2026 Mar 23, 1999 N/A· v4 N/A· v3 7.2 HIGH· v2 The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the...Show more The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs.Show less
CVE-1999-0382 1Microsoft 1Windows Nt Apr 16, 2026 Mar 12, 1999 N/A· v4 N/A· v3 7.2 HIGH· v2 The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
CVE-1999-1254 1Microsoft 3Windows 95 Windows 98Windows Nt Apr 16, 2026 Mar 8, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
CVE-1999-0386 1Microsoft 2Frontpage Personal Web Server Apr 16, 2026 Mar 1, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
CVE-1999-0379 1Microsoft 1Backoffice Resource Kit Apr 16, 2026 Feb 22, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
CVE-1999-0376 1Microsoft 1Windows Nt Apr 16, 2026 Feb 20, 1999 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
CVE-1999-0412 1Microsoft 2Internet Information Server Internet Information Services Apr 16, 2026 Feb 19, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
CVE-1999-0372 1Microsoft 3Backoffice Windows 2000Windows Nt Apr 16, 2026 Feb 12, 1999 N/A· v4 N/A· v3 2.1 LOW· v2 The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
CVE-1999-1375 1Microsoft 1Internet Information Server Apr 16, 2026 Feb 11, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.
CVE-1999-0407 1Microsoft 1Internet Information Server Apr 16, 2026 Feb 9, 1999 N/A· v4 N/A· v3 10.0 HIGH· v2 By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
CVE-1999-0366 1Microsoft 1Windows Nt Apr 16, 2026 Feb 8, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.
CVE-1999-1201 1Microsoft 2Windows 95 Windows 98 Apr 16, 2026 Feb 6, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) pac...Show more Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.Show less
CVE-1999-1453 1Microsoft 1Internet Explorer Apr 16, 2026 Feb 2, 1999 N/A· v4 N/A· v3 2.6 LOW· v2 Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object.
CVE-1999-0360 1Microsoft 1Site Server Apr 16, 2026 Jan 30, 1999 N/A· v4 N/A· v3 7.2 HIGH· v2 MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
CVE-1999-0349 1Microsoft 1Internet Information Server Apr 16, 2026 Jan 27, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
CVE-1999-0348 1Microsoft 1Internet Information Server Apr 16, 2026 Jan 27, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
CVE-1999-0450 1Microsoft 2Internet Information Server Internet Information Services Apr 16, 2026 Jan 26, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
CVE-1999-0449 1Microsoft 1Internet Information Server Apr 16, 2026 Jan 26, 1999 N/A· v4 N/A· v3 7.8 HIGH· v2 The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.

Previous 1...883884885...889 Next