CVE-2018-15832

upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI...

CVE-2018-16956

The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can be renamed to include characters unsupported for URIs by the web server hosting the WCI Portal software such as IIS. Renaming pages to inclu...

CVE-2018-16134

Cybrotech CyBroHttpServer 1.0.3 allows XSS via a URI...

undertow: Client can use bogus uri in Digest authentication

It was discovered that when using Digest authentication, the server does not ensure that the value of the URI in the authorization header matches the URI in the HTTP request line. This allows the attacker to execute a MITM attack and access the desired content on the server...

The vulnerability of Firefox browser, related to incorrect display of characters in the address bar, allows a hacker to replace the URI address.

The vulnerability of Firefox browsers is related to the incorrect display of Tibetan characters when using certain fonts in OS X’s address bar. Exploiting this vulnerability allows a remote attacker to replace URI addresses...

Joomla! Core cross-site scripting vulnerability (CNVD-2018-15243)

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A cross-site scripting vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the program's failure to compile the...

Moxa EDR-810 Denial of Service Vulnerability

Moxa EDR-810 is a security router with both firewall and VPN functions from Moxa. A denial of service vulnerability exists in the Web server feature of the Moxa EDR-810 version 4.1 build 17030317. The vulnerability can be exploited to cause a denial of service Web server crash by sending a...

The vulnerability of the FTP URI processor of the software tool for interacting with servers via cURL allows a hacker to induce a service failure.

The vulnerability of the FTP URI handler of the software interface to interactions with servers via cURL arises due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

DEBIAN-CVE-2017-12196

undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the...

CVE-2018-8978

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

Cisco Meeting Server Denial of Service Vulnerability (CNVD-2017-36125)

Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States Cisco Cisco company's set of audio and video conferencing server software. A denial of service vulnerability exists in Cisco Meeting Server versions prior to 2.2.2. A remote attacker can exploit this...

Geutebrueck Gcore server buffer overflow vulnerability

Geutebrueck Gcore is a video management system from GEUREBRÜCK, Germany. server is one of the servers. A stack buffer overflow vulnerability exists in the GCoreServer.exe file of server in Geutebrueck Gcore versions 1.3.8.42 and 1.4.2.37. A remote attacker can exploit this vulnerability to execut...

CVE-2017-12413

AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...

Huawei BestShare 5 Directory Traversal Vulnerability

The Huawei Enjoy 5 TIT-AL00 is a smartphone from the Chinese company Huawei. A directory traversal vulnerability exists in Huawei Enjoy 5 TIT-AL00C583B211 version. An attacker who induces a user to install a malicious mobile application and modifies a specific URI can obtain information about fil...

UBUNTU-CVE-2015-5381

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter to the default URI...

mod_jk: Buffer overflow when concatenating virtual host name and URI

It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...

mod_jk: Buffer overflow when concatenating virtual host name and URI

It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...

Mozilla Firefox Local File Access Vulnerability

Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly restrict drag-and-drop operations on file: URIs, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing to access local files...

Apache XML-RPC Server-Side Request Forgery Vulnerability

Apache XML-RPC is the United States Apache Apache Software Foundation of a simple, lightweight set of RPC communication through the HTTP protocol specification. A server-side request forgery vulnerability exists in Apache XML-RPC that allows a remote attacker to construct a malicious URI, trick a...

The vulnerability of the Firefox browser, which allows a hacker to replace web pages

The vulnerability of Firefox browsers is related to errors in processing the "" character in URI data. Exploiting this vulnerability can allow a remote attacker to replace web pages...