CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통5.0 |
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. |
| 31/12/1999 |
| CVE-1999-0412 | 높음7.5 | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | 19/02/1999 |
| CVE-1999-0450 | 높음7.5 | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | 26/01/1999 |
| CVE-1999-0281 | 보통5.0 | Denial of service in IIS using long URLs. | 01/06/1997 |
| CVE-1999-0253 | 높음7.5 | IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL. | 01/01/1997 |
| CVE-1999-0233 | 심각10.0 | IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. | 25/02/1996 |