Vulnerabilities > Microsoft > Windows Vista > Low

DATE CVE VULNERABILITY TITLE RISK
2010-07-30 CVE-2010-1796 Information Exposure vulnerability in Apple Safari and Webkit
The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields.
network
high complexity
apple microsoft CWE-200
2.6
2009-08-12 CVE-2009-1536 Improper Input Validation vulnerability in Microsoft .Net Framework, Windows Server 2008 and Windows Vista
ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
network
high complexity
microsoft CWE-20
2.6
2008-09-03 CVE-2008-3893 Information Exposure vulnerability in Microsoft Windows Vista
Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
1.9