CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MOYENNE5.0 |
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. |
| 31/12/1999 |
| CVE-1999-0412 | ÉLEVÉE7.5 | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | 19/02/1999 |
| CVE-1999-0450 | ÉLEVÉE7.5 | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | 26/01/1999 |
| CVE-1999-0281 | MOYENNE5.0 | Denial of service in IIS using long URLs. | 01/06/1997 |
| CVE-1999-0253 | ÉLEVÉE7.5 | IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL. | 01/01/1997 |
| CVE-1999-0233 | CRITIQUE10.0 | IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. | 25/02/1996 |