Skip to content

October 2000 · Band 4

Possible (1 to 10%)

202 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 202 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes s…CVE-2000-0594Caldera · 9.9% likely

    Caldera

  2. HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.CVE-2000-0179Hp · 9.7% likely

    HP

  3. A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a vari…CVE-2000-0768Microsoft · 9.5% likely

    Microsoft

  4. The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to…CVE-2000-0639Sean Macguire · 9.5% likely
  5. IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web brow…CVE-2000-0787Xchat · 9.2% likely

    Xchat

  6. Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections.CVE-2000-0613Cisco · 9.2% likely

    Cisco

  7. rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.CVE-2000-0508Redhat · 8.6% likely

    Red Hat

  8. ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.CVE-2000-0538Allaire · 8.4% likely

    Allaire

  9. The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges.CVE-2000-0515Hp · 8.4% likely

    HP

  10. Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00…CVE-2000-0671Roxen · 8.0% likely
  11. IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" st…CVE-2000-0652Ibm · 8.0% likely

    IBM

  12. ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0705Luca Deri · 8.0% likely
  13. Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.CVE-2000-0446Marty Bochane · 7.9% likely
  14. AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots.CVE-2000-0664Analogx · 7.9% likely

    Analogx

  15. The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0634Stalker · 7.9% likely

    Stalker

  16. TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.CVE-2000-0282Talentsoft · 7.8% likely

    Talentsoft

  17. Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.CVE-2000-0521Michael Lamont · 7.7% likely
  18. netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0782Netwin · 7.7% likely

    Netwin

  19. vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.CVE-2000-0240Vqsoft · 7.7% likely
  20. Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server…CVE-2000-0582Checkpoint · 7.6% likely

    Check Point

  21. explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0872Nathan Purciful · 7.5% likely
  22. SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as…CVE-2000-0588Sawmill · 7.5% likely

    CWE-200Sawmill

  23. WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing.CVE-2000-0644Texas Imperial Software · 7.3% likely

    Texas Imperial Software

  24. Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.CVE-2000-0507Concatus · 7.3% likely
  25. pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.CVE-2000-0668Michael K. Johnson · 7.2% likely
  26. Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether…CVE-2000-0640Steve Poulsen · 7.2% likely

    Steve Poulsen

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.