No vendor recorded · 2000
No vendor recorded: 2000
114 CVEs
Every dot is a CVE whose record names no vendor, published in 2000. The named ones are the most at risk.
- likely to be exploited
- 7
Every one of the 114 is a mark on the map. Named now: 1 to 26, most at risk first.
- A DNS server allows zone transfers.
- A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive…
- Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands.
- A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
- The rsh/rlogin service is running.
- NFS exports system-critical data to the world, e.g. / or a password file.
- An SNMP community name is guessable.
- classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
- The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
- The Java Web Server would allow remote users to obtain the source code for CGI programs.
- IIS has the #exec function enabled for Server Side Include (SSI) files.
- Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use t…
- Anonymous FTP is enabled.
- classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
- BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
- IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.
- An account on a router, firewall, or other network device has a default, null, blank, or missing password.
- BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
- TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.
- A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
- A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.
- IP traceroute is allowed from arbitrary hosts.
- Buffer overflow in ircd allows arbitrary command execution.
- Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
- A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.
- Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.