CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危5.0 |
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. |
| 31/12/1999 |
| CVE-1999-0412 | 高危7.5 | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | 19/02/1999 |
| CVE-1999-0450 | 高危7.5 | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | 26/01/1999 |
| CVE-1999-0281 | 中危5.0 | Denial of service in IIS using long URLs. | 01/06/1997 |
| CVE-1999-0253 | 高危7.5 | IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL. | 01/01/1997 |
| CVE-1999-0233 | 严重10.0 | IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. | 25/02/1996 |