CVEs published June 15, 2000
18 CVEs were published on June 15, 2000: 0 critical, 0 high.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 18
- CVE-2000-0383The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
- CVE-2000-0384NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure
- CVE-2000-0385FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email c
- CVE-2000-0386FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
- CVE-2000-0400The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an atta
- CVE-2000-0401Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long q
- CVE-2000-0412The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbit
- CVE-2000-0413The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML,
- CVE-2000-0415Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp atta
- CVE-2000-0420The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and
- CVE-2000-0422Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.
- CVE-2000-0423Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd,
- CVE-2000-0429A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
- CVE-2000-0433The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to th
- CVE-2000-0434The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by r
- CVE-2000-0444HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.
- CVE-2000-0449Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
- CVE-2000-0450Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands.