Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (26051 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-0489 1 Microsoft 1 Windows Nt 2025-04-03 N/A
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.
CVE-1999-0469 1 Microsoft 1 Internet Explorer 2025-04-03 N/A
Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.
CVE-1999-0407 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
CVE-1999-0391 1 Microsoft 3 Terminal Server, Windows 2000, Windows Nt 2025-04-03 N/A
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
CVE-1999-0376 1 Microsoft 1 Windows Nt 2025-04-03 N/A
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
CVE-1999-0372 1 Microsoft 3 Backoffice, Windows 2000, Windows Nt 2025-04-03 N/A
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
CVE-1999-0366 1 Microsoft 1 Windows Nt 2025-04-03 N/A
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.
CVE-1999-0364 2 Fms Inc., Microsoft 2 Total Vb Sourcebook, Access 2025-04-03 N/A
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
CVE-1999-0360 1 Microsoft 1 Site Server 2025-04-03 N/A
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
CVE-1999-0349 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
CVE-1999-0348 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
CVE-1999-0344 1 Microsoft 1 Windows Nt 2025-04-03 N/A
NT users can gain debug-level access on a system process using the Sechole exploit.
CVE-1999-0332 1 Microsoft 1 Netmeeting 2025-04-03 N/A
Buffer overflow in NetMeeting allows denial of service and remote command execution.
CVE-1999-0331 1 Microsoft 1 Internet Explorer 2025-04-03 N/A
Buffer overflow in Internet Explorer 4.0(1).
CVE-1999-0258 1 Microsoft 2 Windows 95, Windows Nt 2025-04-03 N/A
Bonk variation of teardrop IP fragmentation denial of service.
CVE-1999-0256 2 Jgaa, Microsoft 3 Warftpd, Windows 95, Windows Nt 2025-04-03 N/A
Buffer overflow in War FTP allows remote execution of commands.
CVE-1999-0253 1 Microsoft 2 Internet Information Server, Internet Information Services 2025-04-03 N/A
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
CVE-1999-0233 1 Microsoft 1 Internet Information Services 2025-04-03 N/A
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
CVE-1999-0229 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
Denial of service in Windows NT IIS server using ..\..
CVE-1999-0228 1 Microsoft 1 Windows Nt 2025-04-03 N/A
Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.