Skip to content
OpenAdvisories

Archive

February 2000

Vulnerabilities first published in this month (UTC), newest first.

← January 2000 2000 / February March 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4338
  5. 5 
  6. 6 
  7. 7 
  8. 827
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 151
  16. 164
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 237
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
All Critical High Medium Low Exploited only Public exploit

377 results · Feed

  • Unscored —
    CVE-2000-0084

    CuteFTP uses weak encryption to store password information in its tree.dat file.

  • Unscored —
    CVE-2000-0047

    Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL wit…

  • Unscored —
    CVE-2000-0016 Public exploit

    Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute c…

  • Unscored —
    CVE-2000-0079

    The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request f…

  • Unscored —
    CVE-2000-0074 Public exploit

    PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permiss…

  • Unscored —
    CVE-2000-0066

    WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.

  • Unscored —
    CVE-2000-0086

    Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffi…

  • Unscored —
    CVE-2000-0038 Public exploit

    glFtpD includes a default glftpd user account with a default password and a UID of 0.

  • Unscored —
    CVE-2000-0077 Public exploit

    The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate …

  • Unscored —
    CVE-2000-0081 EPSS 19%

    Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the c…

  • Unscored —
    CVE-2000-0017 Public exploit

    Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.

  • Unscored —
    CVE-2000-0054 Public exploit

    search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) atta…

  • Unscored —
    CVE-2000-0082 EPSS 15%

    WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.

  • Unscored —
    CVE-2000-0071 EPSS 28%

    IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with…

  • Unscored —
    CVE-2000-0067

    CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.

  • Unscored —
    CVE-2000-0061 Public exploit EPSS 20%

    Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the…

  • Unscored —
    CVE-2000-0021

    Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existe…