By publication date
Exploited and new serious CVEs: January 2000
16 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2000-0082No exploit | WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.microsoft · webtv | Medium5.0 | — | 14.5% | Jan 2, 2000 |
34Monitor | CVE-2000-0053No exploit | Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.microsoft · commercial internet system | High7.5 | — | 14.6% | Jan 4, 2000 |
43Plan | CVE-2000-0059Proof of concept | PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remotephp · php | Critical10.0 | — | 10.9% | Jan 4, 2000 |
34Monitor | CVE-2000-0085No exploit | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNmicrosoft · hotmail | High7.5 | — | 14.9% | Jan 4, 2000 |
46Plan | CVE-2000-0061Proof of concept | Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been lomicrosoft · internet explorer | Critical10.0 | — | 19.8% | Jan 7, 2000 |
44Plan | CVE-2000-1220Proof of concept | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing ssgi · irix | Critical10.0 | — | 14.2% | Jan 8, 2000 |
45Plan | CVE-2000-1221Proof of concept | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostnamsgi · irix | Critical10.0 | — | 16.7% | Jan 8, 2000 |
46Plan | CVE-2000-0081No exploit | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimicrosoft · hotmail | Critical10.0 | — | 18.9% | Jan 10, 2000 |
28Monitor | CVE-2000-0071No exploit | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensimicrosoft · internet information server | Medium5.0 | — | 28.0% | Jan 11, 2000 |
44Plan | CVE-2000-0065Proof of concept | Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.avtronics · inetserv | Critical10.0 | — | 12.8% | Jan 17, 2000 |
44Plan | CVE-2000-0091Proof of concept | Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passworinter7 · vpopmail | Critical10.0 | — | 12.8% | Jan 21, 2000 |
23Monitor | CVE-2000-0115No exploit | IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.microsoft · internet information server | Medium5.0 | — | 10.0% | Jan 21, 2000 |
31Monitor | CVE-2000-0097Proof of concept | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argumicrosoft · index server | Medium5.0 | — | 35.8% | Jan 26, 2000 |
35Monitor | CVE-2000-0098No exploit | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file tmicrosoft · index server | Medium5.0 | — | 48.5% | Jan 26, 2000 |
34Monitor | CVE-2000-0126Proof of concept | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a ..microsoft · internet information server | Medium5.0 | — | 45.6% | Jan 26, 2000 |
16Monitor | CVE-2000-0132Proof of concept | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.microsoft · virtual machine · CWE-200 | Low2.6 | — | 19.0% | Jan 31, 2000 |
- CVE-2000-008224Monitor
WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
MediumCVSS 5.0No exploitEPSS 14%microsoft · webtvJan 2, 2000
- CVE-2000-005334Monitor
Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
HighCVSS 7.5No exploitEPSS 14%microsoft · commercial internet systemJan 4, 2000
- CVE-2000-005943Plan
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote
CriticalCVSS 10.0Proof of conceptEPSS 10%php · phpJan 4, 2000
- CVE-2000-008534Monitor
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYN
HighCVSS 7.5No exploitEPSS 14%microsoft · hotmailJan 4, 2000
- CVE-2000-006146Plan
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been lo
CriticalCVSS 10.0Proof of conceptEPSS 19%microsoft · internet explorerJan 7, 2000
- CVE-2000-122044Plan
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing s
CriticalCVSS 10.0Proof of conceptEPSS 14%sgi · irixJan 8, 2000
- CVE-2000-122145Plan
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostnam
CriticalCVSS 10.0Proof of conceptEPSS 16%sgi · irixJan 8, 2000
- CVE-2000-008146Plan
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadeci
CriticalCVSS 10.0No exploitEPSS 18%microsoft · hotmailJan 10, 2000
- CVE-2000-007128Monitor
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensi
MediumCVSS 5.0No exploitEPSS 28%microsoft · internet information serverJan 11, 2000
- CVE-2000-006544Plan
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
CriticalCVSS 10.0Proof of conceptEPSS 12%avtronics · inetservJan 17, 2000
- CVE-2000-009144Plan
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor
CriticalCVSS 10.0Proof of conceptEPSS 12%inter7 · vpopmailJan 21, 2000
- CVE-2000-011523Monitor
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
MediumCVSS 5.0No exploitEPSS 10%microsoft · internet information serverJan 21, 2000
- CVE-2000-009731Monitor
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu
MediumCVSS 5.0Proof of conceptEPSS 35%microsoft · index serverJan 26, 2000
- CVE-2000-009835Monitor
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t
MediumCVSS 5.0No exploitEPSS 48%microsoft · index serverJan 26, 2000
- CVE-2000-012634Monitor
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a ..
MediumCVSS 5.0Proof of conceptEPSS 45%microsoft · internet information serverJan 26, 2000
- CVE-2000-013216Monitor
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
LowCVSS 2.6Proof of conceptEPSS 19%microsoft · virtual machineJan 31, 2000