| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2002-0574 | 5.0 |
Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_output() in which the reference count for a routing table entry is not decremented, which p
|
26-01-2024 - 18:55 | 03-07-2002 - 04:00 | |
| CVE-2000-1216 | 7.2 |
Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
|
09-12-2020 - 15:59 | 27-01-2000 - 05:00 | |
| CVE-1999-1297 | 2.1 |
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key.
|
30-10-2018 - 16:26 | 15-07-1998 - 04:00 | |
| CVE-2006-0454 | 5.0 |
Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send, does not properly handle when the ip_options_echo function in icmp.c fails, which allows remote attackers to cause a denial of service (crash) via vectors
|
19-10-2018 - 15:44 | 07-02-2006 - 18:06 | |
| CVE-2006-2639 | 4.3 |
Cross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element.
|
18-10-2018 - 16:41 | 30-05-2006 - 10:02 | |
| CVE-2009-5135 | 5.0 |
The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) is
|
10-10-2018 - 19:49 | 02-05-2013 - 11:44 | |
| CVE-1999-0103 | 5.0 |
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.
|
22-08-2018 - 18:29 | 08-02-1996 - 05:00 | |
| CVE-2014-1835 | 2.1 |
The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table.
|
14-02-2018 - 15:12 | 02-02-2018 - 21:29 | |
| CVE-2001-0754 | 5.0 |
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets.
|
10-10-2017 - 01:29 | 18-10-2001 - 04:00 | |
| CVE-2001-0057 | 5.0 |
Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet.
|
10-10-2017 - 01:29 | 16-02-2001 - 05:00 | |
| CVE-2008-0355 | 7.5 |
SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action, a different vector than CVE-2007-2866.
|
29-09-2017 - 01:30 | 18-01-2008 - 22:00 | |
| CVE-2009-2401 | 4.3 |
Cross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post.
|
19-09-2017 - 01:29 | 09-07-2009 - 16:30 | |
| CVE-2013-0499 | 4.3 |
Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demon
|
29-08-2017 - 01:33 | 28-05-2013 - 16:55 | |
| CVE-2008-7034 | 7.5 |
PHP remote file inclusion vulnerability in kernel/smarty/Smarty.class.php in PHPEcho CMS 2.0 rc3 allows remote attackers to execute arbitrary PHP code via a URL in unspecified vectors that modify the _smarty_compile_path variable in the fetch functio
|
17-08-2017 - 01:29 | 24-08-2009 - 10:30 | |
| CVE-2008-3705 | 7.5 |
Stack-based buffer overflow in the CLogger::WriteFormated function in echoware/Logger.cpp in EchoVNC Linux before 1.1.2 allows remote echoServers to execute arbitrary code via a large (1) group or (2) user list, aka a "very crowded echoServer" attack
|
08-08-2017 - 01:32 | 19-08-2008 - 19:41 | |
| CVE-2004-0819 | 5.0 |
The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service (crash) via an ICMP echo (ping) packet.
|
11-07-2017 - 01:30 | 25-08-2004 - 04:00 |