# CVEs published 2000-04-26 19 CVEs were published on April 26, 2000: 0 critical, 0 high. Days are UTC. - [CVE-2000-0248](https://cve.now/CVE-2000-0248.md): The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote atta (no CVSS) - [CVE-2000-0250](https://cve.now/CVE-2000-0250.md): The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords. (no CVSS) - [CVE-2000-0256](https://cve.now/CVE-2000-0256.md): Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not ot (no CVSS) - [CVE-2000-0259](https://cve.now/CVE-2000-0259.md): The default permissions for the Cryptography\\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain (no CVSS) - [CVE-2000-0266](https://cve.now/CVE-2000-0266.md): Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java (no CVSS) - [CVE-2000-0269](https://cve.now/CVE-2000-0269.md): Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify (no CVSS) - [CVE-2000-0270](https://cve.now/CVE-2000-0270.md): The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink att (no CVSS) - [CVE-2000-0271](https://cve.now/CVE-2000-0271.md): read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read (no CVSS) - [CVE-2000-0275](https://cve.now/CVE-2000-0275.md): CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file t (no CVSS) - [CVE-2000-0280](https://cve.now/CVE-2000-0280.md): Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Locat (no CVSS) - [CVE-2000-0281](https://cve.now/CVE-2000-0281.md): Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message. (no CVSS) - [CVE-2000-0284](https://cve.now/CVE-2000-0284.md): Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other comman (no CVSS) - [CVE-2000-0286](https://cve.now/CVE-2000-0286.md): X fontserver xfs allows local users to cause a denial of service via malformed input to the server. (no CVSS) - [CVE-2000-0288](https://cve.now/CVE-2000-0288.md): Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable. (no CVSS) - [CVE-2000-0291](https://cve.now/CVE-2000-0291.md): Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. (no CVSS) - [CVE-2000-0293](https://cve.now/CVE-2000-0293.md): aaa\_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names in (no CVSS) - [CVE-2000-0295](https://cve.now/CVE-2000-0295.md): Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen\_add command. (no CVSS) - [CVE-2000-0299](https://cve.now/CVE-2000-0299.md): Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP r (no CVSS) - [CVE-2000-0300](https://cve.now/CVE-2000-0300.md): The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT do (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2000-04-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.