60.297 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.297 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2000-0122 | MED 5.0 | microsoft frontpage Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program. | 21.5% | — |
| CVE-2000-0115 | MED 5.0 | microsoft internet_information_server IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page. | 10.0% | — |
| CVE-2000-0114 | MED 5.0 | microsoft internet_information_server Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory. | 47.6% | — |
| CVE-2000-0105 | MED 5.0 | microsoft outlook_express Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client. | 20.7% | — |
| CVE-2000-0098 | MED 5.0 | microsoft index_server Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. | 48.5% | — |
| CVE-2000-0097 | MED 5.0 | microsoft index_server The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. | 35.9% | — |
| CVE-2000-0082 | MED 5.0 | microsoft webtv WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML. | 14.5% | — |
| CVE-2000-0073 | MED 5.0 | microsoft windows_2000 Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word. | 20.7% | — |
| CVE-2000-0071 | MED 5.0 | microsoft internet_information_server IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. | 28.1% | — |
| CVE-2000-0036 | MED 5.0 | microsoft ie Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability. | 3.9% | — |
| CVE-2000-0025 | MED 5.0 | microsoft internet_information_server IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability. | 34.9% | — |
| CVE-1999-1581 | MED 5.0 | microsoft windows_nt Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that | 20.6% | — |
| CVE-1999-1579 | MED 5.0 | microsoft windows_nt The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the targe | 21.8% | — |
| CVE-1999-1550 | MED 5.0 | f5 tmos bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter. | 8.6% | — |
| CVE-1999-1544 | MED 5.0 | microsoft internet_information_server Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. | 13.6% | — |
| CVE-1999-1537 | MED 5.0 | microsoft internet_information_server IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause | 8.5% | — |
| CVE-1999-1520 | MED 5.0 | microsoft site_server A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information. | 11.7% | — |
| CVE-1999-1478 | MED 5.0 | microsoft internet_information_server The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character. | 18.3% | — |
| CVE-1999-1473 | MED 5.0 | microsoft internet_explorer When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue." | 7.4% | — |
| CVE-1999-1472 | MED 5.0 | microsoft internet_explorer Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue. | 17.1% | — |
| CVE-1999-1463 | MED 5.0 | microsoft windows_nt Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session. | 16.6% | — |
| CVE-1999-1451 | MED 5.0 | microsoft internet_information_server The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files. | 17.6% | — |
| CVE-1999-1447 | MED 5.0 | microsoft internet_explorer Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag. | 13.3% | — |
| CVE-1999-1412 | MED 5.0 | apache http_server A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes. | 35.9% | — |
| CVE-1999-1387 | MED 5.0 | microsoft windows_nt Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25. | 21.2% | — |