) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/o:microsoft:windows_server_2008:r2:sp1
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2023-50387 |
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. Published: February 14, 2024; 11:15:45 AM -0500 |
V3.1: 7.5 HIGH V2.0:(not available) |
| CVE-2024-21406 |
Windows Printing Service Spoofing Vulnerability Published: February 13, 2024; 1:15:59 PM -0500 |
V3.1: 7.5 HIGH V2.0:(not available) |
| CVE-2024-21356 |
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Published: February 13, 2024; 1:15:52 PM -0500 |
V3.1: 6.5 MEDIUM V2.0:(not available) |
| CVE-2024-21349 |
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability Published: February 13, 2024; 1:15:50 PM -0500 |
V3.1: 8.8 HIGH V2.0:(not available) |
| CVE-2024-21340 |
Windows Kernel Information Disclosure Vulnerability Published: February 13, 2024; 1:15:49 PM -0500 |
V3.1: 4.6 MEDIUM V2.0:(not available) |
| CVE-2024-21314 |
Microsoft Message Queuing Information Disclosure Vulnerability Published: January 09, 2024; 1:15:55 PM -0500 |
V3.1: 6.5 MEDIUM V2.0:(not available) |
| CVE-2024-21313 |
Windows TCP/IP Information Disclosure Vulnerability Published: January 09, 2024; 1:15:55 PM -0500 |
V3.1: 5.3 MEDIUM V2.0:(not available) |
| CVE-2024-21312 |
.NET Framework Denial of Service Vulnerability Published: January 09, 2024; 1:15:55 PM -0500 |
V3.1: 7.5 HIGH V2.0:(not available) |
| CVE-2024-21311 |
Windows Cryptographic Services Information Disclosure Vulnerability Published: January 09, 2024; 1:15:54 PM -0500 |
V3.1: 5.5 MEDIUM V2.0:(not available) |
| CVE-2024-21307 |
Remote Desktop Client Remote Code Execution Vulnerability Published: January 09, 2024; 1:15:54 PM -0500 |
V3.1: 7.5 HIGH V2.0:(not available) |
| CVE-2024-20691 |
Windows Themes Information Disclosure Vulnerability Published: January 09, 2024; 1:15:52 PM -0500 |
V3.1: 4.7 MEDIUM V2.0:(not available) |
| CVE-2024-0057 |
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability Published: January 09, 2024; 1:15:46 PM -0500 |
V3.1: 9.8 CRITICAL V2.0:(not available) |
| CVE-2024-0056 |
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability Published: January 09, 2024; 1:15:46 PM -0500 |
V3.1: 8.7 HIGH V2.0:(not available) |
| CVE-2023-36012 |
DHCP Server Service Information Disclosure Vulnerability Published: December 12, 2023; 1:15:21 PM -0500 |
V3.1: 5.3 MEDIUM V2.0:(not available) |
| CVE-2023-36006 |
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Published: December 12, 2023; 1:15:21 PM -0500 |
V3.1: 8.8 HIGH V2.0:(not available) |
| CVE-2023-36005 |
Windows Telephony Server Elevation of Privilege Vulnerability Published: December 12, 2023; 1:15:21 PM -0500 |
V3.1: 8.1 HIGH V2.0:(not available) |
| CVE-2023-36004 |
Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability Published: December 12, 2023; 1:15:20 PM -0500 |
V3.1: 7.5 HIGH V2.0:(not available) |
| CVE-2023-35642 |
Internet Connection Sharing (ICS) Denial of Service Vulnerability Published: December 12, 2023; 1:15:19 PM -0500 |
V3.1: 6.5 MEDIUM V2.0:(not available) |
| CVE-2023-35641 |
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Published: December 12, 2023; 1:15:19 PM -0500 |
V3.1: 8.8 HIGH V2.0:(not available) |
| CVE-2023-35639 |
Microsoft ODBC Driver Remote Code Execution Vulnerability Published: December 12, 2023; 1:15:19 PM -0500 |
V3.1: 8.8 HIGH V2.0:(not available) |