echo project echo vulnerabilities and exploits

(subscribe to this query)

NA

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification.

Echo Project Echo

5.4

CVSSv3

The Stock in & out WordPress plugin up to and including 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issu...

Stock In \\& Out Project Stock In \\& Out

9.8

CVSSv3

weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly ...

Weblogic-framework Project Weblogic-framework

7.5

CVSSv3

libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

Libslirp Project Libslirp 4.0.0 Qemu Qemu 4.1.0

6.5

CVSSv3

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of...

Libslirp Project Libslirp Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Openstack 13 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.0 Opensuse Leap 15.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook