By publication date
Exploited and new serious CVEs: May 2000
18 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
25Monitor | CVE-2000-0347Proof of concept | Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.microsoft · windows 95 | Medium5.0 | — | 17.5% | May 2, 2000 |
33Monitor | CVE-2000-0413Proof of concept | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML,microsoft · frontpage | Medium5.0 | — | 43.8% | May 6, 2000 |
29Monitor | CVE-2000-0304No exploit | Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformmicrosoft · internet information server | Medium5.0 | — | 29.1% | May 10, 2000 |
37Monitor | CVE-2000-0408Proof of concept | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file microsoft · internet information server | Medium5.0 | — | 57.9% | May 11, 2000 |
36Monitor | CVE-2000-0419No exploit | The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via tmicrosoft · access | High7.5 | — | 21.3% | May 11, 2000 |
46Plan | CVE-2000-0457Proof of concept | ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spacmicrosoft · internet information server | High7.5 | — | 52.7% | May 11, 2000 |
27Monitor | CVE-1999-0980Proof of concept | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeramicrosoft · windows nt | Medium5.0 | — | 23.2% | May 16, 2000 |
45Plan | CVE-2000-0389Proof of concept | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.cygnus · cygnus network security | Critical10.0 | — | 16.5% | May 16, 2000 |
34Monitor | CVE-2000-0464No exploit | Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing cmicrosoft · internet explorer | High7.6 | — | 13.3% | May 17, 2000 |
26Monitor | CVE-2000-0465Proof of concept | Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to reamicrosoft · internet explorer | Medium5.1 | — | 20.8% | May 17, 2000 |
43Plan | CVE-2000-0305Proof of concept | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sebe · beos · CWE-399 | High7.8 | — | 38.3% | May 19, 2000 |
33Monitor | CVE-2000-0443Proof of concept | The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a ..hp · jetadmin | High7.5 | — | 10.0% | May 24, 2000 |
45Plan | CVE-2000-0491Proof of concept | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a degnome · gdm | Critical10.0 | — | 17.7% | May 24, 2000 |
25Monitor | CVE-2000-0403No exploit | The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host microsoft · windows nt | Medium5.0 | — | 17.9% | May 25, 2000 |
25Monitor | CVE-2000-0404No exploit | The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browsermicrosoft · terminal server | Medium5.0 | — | 17.9% | May 25, 2000 |
40Plan | CVE-2000-0402Weaponized | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log filemicrosoft · sql server | Low2.1 | — | 90.6% | May 30, 2000 |
30Monitor | CVE-2000-0495Proof of concept | Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Medmicrosoft · windows media services | Medium5.0 | — | 32.3% | May 30, 2000 |
34Monitor | CVE-2000-0505Proof of concept | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a largeapache · http server | Medium5.0 | — | 46.6% | May 31, 2000 |
- CVE-2000-034725Monitor
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
MediumCVSS 5.0Proof of conceptEPSS 17%microsoft · windows 95May 2, 2000
- CVE-2000-041333Monitor
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML,
MediumCVSS 5.0Proof of conceptEPSS 43%microsoft · frontpageMay 6, 2000
- CVE-2000-030429Monitor
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malform
MediumCVSS 5.0No exploitEPSS 29%microsoft · internet information serverMay 10, 2000
- CVE-2000-040837Monitor
IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file
MediumCVSS 5.0Proof of conceptEPSS 57%microsoft · internet information serverMay 11, 2000
- CVE-2000-041936Monitor
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via t
HighCVSS 7.5No exploitEPSS 21%microsoft · accessMay 11, 2000
- CVE-2000-045746Plan
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spac
HighCVSS 7.5Proof of conceptEPSS 52%microsoft · internet information serverMay 11, 2000
- CVE-1999-098027Monitor
Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumera
MediumCVSS 5.0Proof of conceptEPSS 23%microsoft · windows ntMay 16, 2000
- CVE-2000-038945Plan
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
CriticalCVSS 10.0Proof of conceptEPSS 16%cygnus · cygnus network securityMay 16, 2000
- CVE-2000-046434Monitor
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing c
HighCVSS 7.6No exploitEPSS 13%microsoft · internet explorerMay 17, 2000
- CVE-2000-046526Monitor
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to rea
MediumCVSS 5.1Proof of conceptEPSS 20%microsoft · internet explorerMay 17, 2000
- CVE-2000-030543Plan
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by se
HighCVSS 7.8Proof of conceptEPSS 38%be · beosMay 19, 2000
- CVE-2000-044333Monitor
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a ..
HighCVSS 7.5Proof of conceptEPSS 10%hp · jetadminMay 24, 2000
- CVE-2000-049145Plan
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a de
CriticalCVSS 10.0Proof of conceptEPSS 17%gnome · gdmMay 24, 2000
- CVE-2000-040325Monitor
The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host
MediumCVSS 5.0No exploitEPSS 17%microsoft · windows ntMay 25, 2000
- CVE-2000-040425Monitor
The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser
MediumCVSS 5.0No exploitEPSS 17%microsoft · terminal serverMay 25, 2000
- CVE-2000-040240Plan
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file
LowCVSS 2.1WeaponizedEPSS 90%microsoft · sql serverMay 30, 2000
- CVE-2000-049530Monitor
Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Med
MediumCVSS 5.0Proof of conceptEPSS 32%microsoft · windows media servicesMay 30, 2000
- CVE-2000-050534Monitor
The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large
MediumCVSS 5.0Proof of conceptEPSS 46%apache · http serverMay 31, 2000