CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 16/06/1999 |
| CVE-1999-0739 | 보통5.0 | The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0738 | 보통5.0 | The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0737 | 보통5.0 | The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0736 | 보통5.0 | The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0412 | 높음7.5 | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | 19/02/1999 |
| CVE-1999-1375 | 보통5.0 | FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter. | 11/02/1999 |
| CVE-1999-0407 | 심각10.0 | By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. | 09/02/1999 |
| CVE-1999-0349 | 높음7.5 | A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands. | 27/01/1999 |
| CVE-1999-0348 | 보통5.0 | IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory. | 27/01/1999 |
| CVE-1999-0450 | 높음7.5 | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | 26/01/1999 |
| CVE-1999-0449 | 높음7.8 | The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts. | 26/01/1999 |
| CVE-1999-1544 | 보통5.0 | Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. | 24/01/1999 |
| CVE-1999-1538 | 낮음2.1 | When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password. | 14/01/1999 |
| CVE-1999-1376 | 심각10.0 | Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. | 14/01/1999 |
| CVE-1999-0448 | 보통5.0 | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | 01/01/1999 |
| CVE-1999-0007 | 보통5.0 | Information from SSL-encrypted sessions via PKCS #1. | 26/06/1998 |
| CVE-1999-0278 | 보통5.0 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | 01/06/1998 |