Browse CVEs

HIGH 7.5 CVE-2002-0056EPSS 25% Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or… Sql Server Mitigation only Fix from $1,9502002-03-08 MEDIUM 5.0 CVE-2002-0021EPSS 14% Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service (crash) via a malf… Office Mitigation only Fix from $1,6002002-03-08 MEDIUM 5.0 CVE-2002-0057EPSS 19% XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to rea… Internet Explorer Mitigation only Fix from $1,6002002-03-08 HIGH 7.5 CVE-2001-1547EPSS 14% Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachment… Outlook Express Mitigation only Fix from $1,9502001-12-31 MEDIUM 5.3 CVE-2001-1533EPSS 18% Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP pac… Isa Server Mitigation only Fix from $1,6002001-12-31 MEDIUM 5.0 CVE-2001-1489EPSS 18% Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large numb… Ie No fix yet Fix from $1,6002001-12-31 MEDIUM 5.0 CVE-2001-1552EPSS 14% ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol (S… Windows Me No fix yet Fix from $1,6002001-12-31 MEDIUM 5.0 CVE-2001-1186EPSS 35% Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size o… Internet Information Services No fix yet Fix from $1,6002001-12-11 HIGH 7.5 CVE-2001-0719EPSS 18% Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (AS… Windows Media Player Mitigation only Fix from $1,9502001-12-06 MEDIUM 5.0 CVE-2001-0663EPSS 32% Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol… Windows 2000 Mitigation only Fix from $1,6002001-12-06 MEDIUM 5.0 CVE-2001-0721EPSS 17% Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via… Windows 98 Mitigation only Fix from $1,6002001-12-06 MEDIUM 5.0 CVE-2001-0945EPSS 20% Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that con… Outlook Express Mitigation only Fix from $1,6002001-12-03 HIGH 7.5 CVE-2001-0902EPSS 19% Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters. Internet Information Services Mitigation only Fix from $1,9502001-11-20 MEDIUM 5.0 CVE-2001-0505EPSS 33% Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number o… Services Mitigation only Fix from $1,6002001-10-30 MEDIUM 5.0 CVE-2001-0540EPSS 71% Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large n… Terminal Server Mitigation only Fix from $1,6002001-10-30 MEDIUM 5.0 CVE-2001-0545EPSS 18% IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length tha… Internet Information Server Mitigation only Fix from $1,6002001-10-30 MEDIUM 5.0 CVE-2001-0662EPSS 22% RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request. Windows Nt Mitigation only Fix from $1,6002001-10-30 HIGH 7.5 CVE-2001-0658EPSS 14% Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other cli… Isa Server Mitigation only Fix from $1,9502001-09-20 HIGH 7.2 CVE-2001-0507EPSS 9% IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka t… Internet Information Services Mitigation only Fix from $1,9502001-09-20 MEDIUM 5.0 CVE-2001-0508EPSS 27% Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request. Internet Information Services No fix yet Fix from $1,6002001-09-20 MEDIUM 5.0 CVE-2001-0546EPSS 17% Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial o… Isa Server Mitigation only Fix from $1,6002001-09-20 HIGH 7.5 CVE-2001-0999EPSS 12% Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain,… Outlook Express Mitigation only Fix from $1,9502001-09-12 MEDIUM 5.0 CVE-2001-1055EPSS 22% The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packe… Windows 98 No fix yet Fix from $1,6002001-07-30 HIGH 7.2 CVE-2001-0344 An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached con… Sql Server Mitigation only Fix from $1,9502001-07-21 MEDIUM 5.0 CVE-2001-0503EPSS 17% Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetM… Netmeeting Mitigation only Fix from $1,6002001-07-21 HIGH 7.5 CVE-2001-0238EPSS 15% Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions vi… Windows 2000 Mitigation only Fix from $1,9502001-07-02 HIGH 7.5 CVE-2001-0242EPSS 30% Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in a… Windows Media Player No fix yet Fix from $1,9502001-06-27 HIGH 7.5 CVE-2001-0244EPSS 15% Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter. Index Server Mitigation only Fix from $1,9502001-06-27 MEDIUM 5.0 CVE-2001-0243EPSS 18% Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Expl… Windows Media Player Mitigation only Fix from $1,6002001-06-27 MEDIUM 5.0 CVE-2001-0245EPSS 14% Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a m… Index Server Mitigation only Fix from $1,6002001-06-27