Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Total 19627 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0325 1 Microsoft 1 Jet 2024-02-28 7.2 HIGH N/A
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
CVE-2000-0851 1 Microsoft 1 Windows 2000 2024-02-28 4.6 MEDIUM N/A
Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.
CVE-1999-1520 1 Microsoft 1 Site Server 2024-02-28 5.0 MEDIUM N/A
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
CVE-2002-1705 1 Microsoft 1 Internet Explorer 2024-02-28 5.0 MEDIUM N/A
Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) with the p{cssText} element declared and a bold font weight.
CVE-2000-0298 1 Microsoft 1 Windows 2000 2024-02-28 7.2 HIGH N/A
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
CVE-1999-1367 1 Microsoft 1 Internet Explorer 2024-02-28 4.6 MEDIUM N/A
Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users.
CVE-2002-1444 2 Google, Microsoft 2 Toolbar, Internet Explorer 2024-02-28 2.6 LOW N/A
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search() function.