Skip to content

May 2000 · Band 4

Possible (1 to 10%)

8 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes t…CVE-2000-0333Ethereal Group · 7.6% likely

    Ethereal Group

  2. Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.CVE-2000-0343Brecht Claerhout · 5.6% likely
  3. The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.CVE-2000-0325Microsoft · 3.7% likely

    Microsoft

  4. ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.CVE-2000-0358Redhat · 1.9% likely

    Red Hat

  5. ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.CVE-2000-0357Redhat · 1.6% likely

    Red Hat

  6. Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.CVE-2000-0321Icradius · 1.4% likely
  7. Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.CVE-2000-0317Sun · 1.2% likely

    Sun Microsystems

  8. pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.CVE-2000-0355Bent Bagger · 1.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.