Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Total 21800 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0349 1 Microsoft 1 Windows 2000 2018-10-12 7.2 HIGH N/A
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability.
CVE-2001-0346 1 Microsoft 1 Windows 2000 2018-10-12 5.0 MEDIUM N/A
Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them.
CVE-2001-0663 1 Microsoft 2 Windows 2000, Windows Nt 2018-10-12 5.0 MEDIUM N/A
Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.
CVE-2001-0005 1 Microsoft 1 Powerpoint 2018-10-12 6.2 MEDIUM N/A
Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
CVE-2001-0244 1 Microsoft 1 Index Server 2018-10-12 7.5 HIGH N/A
Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
CVE-2001-0540 1 Microsoft 1 Terminal Server 2018-10-12 5.0 MEDIUM N/A
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.
CVE-2001-0541 1 Microsoft 1 Windows Media Player 2018-10-12 7.5 HIGH N/A
Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file.
CVE-2001-0336 1 Microsoft 1 Internet Information Server 2018-10-12 5.0 MEDIUM N/A
The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request.
CVE-2001-0153 1 Microsoft 2 Visual Basic, Visual Studio 2018-10-12 7.5 HIGH N/A
Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.
CVE-2001-0337 1 Microsoft 1 Internet Information Server 2018-10-12 5.0 MEDIUM N/A
The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests.
CVE-2001-0542 1 Microsoft 1 Sql Server 2018-10-12 7.5 HIGH N/A
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
CVE-2001-0047 1 Microsoft 1 Windows Nt 2018-10-12 7.5 HIGH N/A
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.
CVE-2001-0243 1 Microsoft 1 Windows Media Player 2018-10-12 5.0 MEDIUM N/A
Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.
CVE-2001-0245 1 Microsoft 2 Index Server, Indexing Service 2018-10-12 5.0 MEDIUM N/A
Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
CVE-2001-0347 1 Microsoft 1 Windows 2000 2018-10-12 7.5 HIGH N/A
Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.
CVE-2002-0050 1 Microsoft 1 Commerce Server 2018-10-12 7.5 HIGH N/A
Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.
CVE-2001-0333 1 Microsoft 1 Internet Information Server 2018-10-12 7.5 HIGH N/A
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.
CVE-2002-0020 1 Microsoft 2 Interix, Windows 2000 2018-10-12 7.5 HIGH N/A
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.
CVE-2001-0345 1 Microsoft 1 Windows 2000 2018-10-12 5.0 MEDIUM N/A
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.
CVE-2001-0335 1 Microsoft 1 Internet Information Server 2018-10-12 5.0 MEDIUM N/A
FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters.