By publication date
Exploited and new serious CVEs: March 2000
7 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2000-0168Proof of concept | Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka thmicrosoft · windows 95 | Medium5.0 | — | 19.5% | Mar 4, 2000 |
25Monitor | CVE-2000-0200Proof of concept | Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (microsoft · clip art | Medium5.1 | — | 15.7% | Mar 6, 2000 |
38Monitor | CVE-2000-0169Proof of concept | Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.oracle · application server | High7.5 | — | 27.3% | Mar 15, 2000 |
24Monitor | CVE-2000-0228No exploit | Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the microsoft · windows media rights manager | Medium5.0 | — | 13.6% | Mar 17, 2000 |
44Plan | CVE-2000-0245Proof of concept | Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.sgi · irix | Critical10.0 | — | 11.6% | Mar 27, 2000 |
44Plan | CVE-2000-0246Proof of concept | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote atmicrosoft · commercial internet system | Medium5.0 | — | 79.9% | Mar 30, 2000 |
44Plan | CVE-2000-0302Proof of concept | Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile microsoft · index server | Medium5.0 | — | 78.5% | Mar 31, 2000 |
- CVE-2000-016826Monitor
Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka th
MediumCVSS 5.0Proof of conceptEPSS 19%microsoft · windows 95Mar 4, 2000
- CVE-2000-020025Monitor
Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (
MediumCVSS 5.1Proof of conceptEPSS 15%microsoft · clip artMar 6, 2000
- CVE-2000-016938Monitor
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
HighCVSS 7.5Proof of conceptEPSS 27%oracle · application serverMar 15, 2000
- CVE-2000-022824Monitor
Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the
MediumCVSS 5.0No exploitEPSS 13%microsoft · windows media rights managerMar 17, 2000
- CVE-2000-024544Plan
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
CriticalCVSS 10.0Proof of conceptEPSS 11%sgi · irixMar 27, 2000
- CVE-2000-024644Plan
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote at
MediumCVSS 5.0Proof of conceptEPSS 79%microsoft · commercial internet systemMar 30, 2000
- CVE-2000-030244Plan
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile
MediumCVSS 5.0Proof of conceptEPSS 78%microsoft · index serverMar 31, 2000