2000 CVE Vulnerabilities
1,241 CVEs published in 2000.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2000-0157 | — | — | 0.3% | Feb 1, 2000 | NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. |
| CVE-2000-0110 | — | — | 2.0% | Feb 1, 2000 | The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form f... |
| CVE-2000-0151 | — | — | 0.3% | Feb 1, 2000 | GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands. |
| CVE-2000-0108 | — | — | 2.0% | Feb 1, 2000 | The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form f... |
| CVE-2000-0107 | — | — | 0.8% | Feb 1, 2000 | Linux apcd program allows local attackers to modify arbitrary files via a symlink attack. |
| CVE-2000-0106 | — | — | 2.0% | Feb 1, 2000 | The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fiel... |
| CVE-2000-0105 | — | — | 20.7% | Feb 1, 2000 | Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that... |
| CVE-2000-0104 | — | — | 2.1% | Feb 1, 2000 | The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fiel... |
| CVE-2000-0103 | — | — | 2.1% | Feb 1, 2000 | The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fie... |
| CVE-2000-0109 | — | — | 8.4% | Jan 31, 2000 | The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that... |
| CVE-2000-0132 | — | — | 19.5% | Jan 31, 2000 | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. |
| CVE-2000-0117 | — | — | 0.4% | Jan 30, 2000 | The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, si... |
| CVE-2000-0116 | — | — | 2.5% | Jan 29, 2000 | Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restric... |
| CVE-2000-0111 | — | — | 1.4% | Jan 29, 2000 | The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions. |
| CVE-2000-1216 | — | — | 0.5% | Jan 27, 2000 | Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_... |
| CVE-2000-0130 | — | — | 1.0% | Jan 27, 2000 | Buffer overflow in SCO scohelp program allows remote attackers to execute commands. |
| CVE-2000-0113 | — | — | 2.5% | Jan 27, 2000 | The SyGate Remote Management program does not properly restrict access to its administration service, which allows remot... |
| CVE-2000-0098 | — | — | 48.5% | Jan 26, 2000 | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Intern... |
| CVE-2000-0126 | — | — | 45.7% | Jan 26, 2000 | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack. |
| CVE-2000-0097 | — | — | 35.9% | Jan 26, 2000 | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed H... |
| CVE-2000-0096 | — | — | 0.5% | Jan 26, 2000 | Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command. |
| CVE-2000-0095 | — | — | 2.3% | Jan 24, 2000 | The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of tr... |
| CVE-2000-0091 | — | — | 12.9% | Jan 21, 2000 | Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long... |
| CVE-2000-0115 | — | — | 9.8% | Jan 21, 2000 | IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP p... |
| CVE-2000-0093 | — | — | 1.3% | Jan 21, 2000 | An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5. |
Check if your code is affected by 2000 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now