Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2000

10 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2000-0258
    36Monitor

    IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · internet information serverApr 12, 2000

  • CVE-2000-0287
    43Plan

    The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    cnc · technology bizdbApr 12, 2000

  • CVE-2000-0260
    34Monitor

    Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka th

    HighCVSS 7.5Proof of conceptEPSS 13%

    microsoft · frontpageApr 14, 2000

  • CVE-2000-0284
    50Plan

    Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other comman

    HighCVSS 7.5WeaponizedEPSS 68%

    university of washington · imapApr 16, 2000

  • CVE-2000-0266
    15Monitor

    Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java

    LowCVSS 2.6No exploitEPSS 16%

    microsoft · internet explorerApr 18, 2000

  • CVE-2000-0256
    34Monitor

    Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not ot

    HighCVSS 7.5Proof of conceptEPSS 11%

    microsoft · frontpageApr 19, 2000

  • CVE-2000-0272
    34Monitor

    RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.

    HighCVSS 7.8Proof of conceptEPSS 10%

    realnetworks · realserverApr 20, 2000

  • CVE-2000-0248
    62This week

    The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote atta

    CriticalCVSS 10.0WeaponizedEPSS 73%

    redhat · linuxApr 24, 2000

  • CVE-2000-0322
    52Plan

    The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metachar

    CriticalCVSS 10.0WeaponizedEPSS 41%

    redhat · linuxApr 24, 2000

  • CVE-2000-0380
    40Plan

    The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by req

    HighCVSS 7.1WeaponizedEPSS 35%

    cisco · iosApr 26, 2000