Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: October 2000

21 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2000-1204
    23Monitor

    Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source

    MediumCVSS 5.0No exploitEPSS 10%

    apache · http serverOct 13, 2000

  • CVE-2000-0676
    26Monitor

    Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a conne

    MediumCVSS 5.0Proof of conceptEPSS 20%

    netscape · communicatorOct 20, 2000

  • CVE-2000-0681
    55Plan

    Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extensi

    CriticalCVSS 10.0No exploitEPSS 50%

    bea · weblogic serverOct 20, 2000

  • CVE-2000-0684
    44Plan

    BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP c

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    bea · weblogic serverOct 20, 2000

  • CVE-2000-0685
    44Plan

    BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Ja

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    bea · weblogic serverOct 20, 2000

  • CVE-2000-0690
    43Plan

    Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile pa

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    cgi script center · auction weaverOct 20, 2000

  • CVE-2000-0697
    43Plan

    The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    sun · solaris answerbook2Oct 20, 2000

  • CVE-2000-0699
    44Plan

    Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via fo

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    hp · hp-uxOct 20, 2000

  • CVE-2000-0704
    44Plan

    Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    omron · worldviewOct 20, 2000

  • CVE-2000-0709
    28Monitor

    The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some compo

    MediumCVSS 5.0No exploitEPSS 25%

    microsoft · frontpageOct 20, 2000

  • CVE-2000-0710
    28Monitor

    The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the serv

    MediumCVSS 5.0No exploitEPSS 26%

    microsoft · frontpageOct 20, 2000

  • CVE-2000-0711
    40Plan

    Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attacker

    HighCVSS 7.5Proof of conceptEPSS 33%

    netscape · communicatorOct 20, 2000

  • CVE-2000-0733
    44Plan

    Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execut

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    sgi · irixOct 20, 2000

  • CVE-2000-0742
    26Monitor

    The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet

    MediumCVSS 5.0No exploitEPSS 18%

    microsoft · windows 95Oct 20, 2000

  • CVE-2000-0743
    44Plan

    Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    university of minnesota · gopherdOct 20, 2000

  • CVE-2000-0745
    34Monitor

    admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by req

    HighCVSS 7.5Proof of conceptEPSS 12%

    francisco burzi · php-nukeOct 20, 2000

  • CVE-2000-0746
    33Monitor

    Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks.

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · frontpageOct 20, 2000

  • CVE-2000-0759
    33Monitor

    Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates

    MediumCVSS 6.4Proof of conceptEPSS 25%

    apache · tomcatOct 20, 2000

  • CVE-2000-0760
    44Plan

    The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexist

    MediumCVSS 6.4Proof of conceptEPSS 62%

    apache · tomcatOct 20, 2000

  • CVE-2000-0770
    30Monitor

    IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, whi

    MediumCVSS 6.4No exploitEPSS 15%

    microsoft · internet information serverOct 20, 2000

  • CVE-2000-0778
    46Plan

    IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header,

    MediumCVSS 5.0Proof of conceptEPSS 87%

    microsoft · internet information servicesOct 20, 2000