CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 中5.0 |
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. |
| 07/05/1999 |
| CVE-1999-0738 | 中5.0 | The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0737 | 中5.0 | The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0736 | 中5.0 | The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0412 | 高7.5 | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | 19/02/1999 |
| CVE-1999-1375 | 中5.0 | FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter. | 11/02/1999 |
| CVE-1999-0407 | 緊急10.0 | By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. | 09/02/1999 |
| CVE-1999-0349 | 高7.5 | A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands. | 27/01/1999 |
| CVE-1999-0348 | 中5.0 | IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory. | 27/01/1999 |
| CVE-1999-0450 | 高7.5 | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | 26/01/1999 |
| CVE-1999-0449 | 高7.8 | The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts. | 26/01/1999 |
| CVE-1999-1544 | 中5.0 | Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. | 24/01/1999 |
| CVE-1999-1538 | 低2.1 | When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password. | 14/01/1999 |
| CVE-1999-1376 | 緊急10.0 | Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. | 14/01/1999 |
| CVE-1999-0448 | 中5.0 | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | 01/01/1999 |
| CVE-1999-0007 | 中5.0 | Information from SSL-encrypted sessions via PKCS #1. | 26/06/1998 |
| CVE-1999-0278 | 中5.0 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | 01/06/1998 |