May 2000 · Band 4
Possible (1 to 10%)
8 CVEs
Each square is a CVE that EPSS puts between 1% and 10%.
Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.
- tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes t…
- Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
- The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
- ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
- ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
- Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
- Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
- pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.