CVEs published April 26, 2000
19 CVEs were published on April 26, 2000: 0 critical, 0 high.
- Published
- 19
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 19
- CVE-2000-0248The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote atta
- CVE-2000-0250The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
- CVE-2000-0256Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not ot
- CVE-2000-0259The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain
- CVE-2000-0266Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java
- CVE-2000-0269Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify
- CVE-2000-0270The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink att
- CVE-2000-0271read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read
- CVE-2000-0275CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file t
- CVE-2000-0280Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Locat
- CVE-2000-0281Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.
- CVE-2000-0284Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other comman
- CVE-2000-0286X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
- CVE-2000-0288Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.
- CVE-2000-0291Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
- CVE-2000-0293aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names in
- CVE-2000-0295Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
- CVE-2000-0299Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP r
- CVE-2000-0300The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT do