CVE-2017-12413

AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...

Huawei BestShare 5 Directory Traversal Vulnerability

The Huawei Enjoy 5 TIT-AL00 is a smartphone from the Chinese company Huawei. A directory traversal vulnerability exists in Huawei Enjoy 5 TIT-AL00C583B211 version. An attacker who induces a user to install a malicious mobile application and modifies a specific URI can obtain information about fil...

UBUNTU-CVE-2015-5381

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter to the default URI...

mod_jk: Buffer overflow when concatenating virtual host name and URI

It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...

Mozilla Firefox Local File Access Vulnerability

Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly restrict drag-and-drop operations on file: URIs, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing to access local files...

Apache XML-RPC Server-Side Request Forgery Vulnerability

Apache XML-RPC is the United States Apache Apache Software Foundation of a simple, lightweight set of RPC communication through the HTTP protocol specification. A server-side request forgery vulnerability exists in Apache XML-RPC that allows a remote attacker to construct a malicious URI, trick a...

The vulnerability of the Firefox browser, which allows a hacker to replace web pages

The vulnerability of Firefox browsers is related to errors in processing the "" character in URI data. Exploiting this vulnerability can allow a remote attacker to replace web pages...

Android elevation of privilege vulnerability (CNVD-2015-06528)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An elevation of privilege vulnerability exists in LMY48I, a version of Android prior to 5.1.1, which allows an attacker to gain privileges to a URI via an application that...

Apple Safari PDF Arbitrary Script Execution Vulnerability

Apple Safari is a popular WEB browser. A security vulnerability exists in Apple Safari that allows an attacker to construct a malicious URI containing an embedded PDF page, which induces a user to visit it and execute arbitrary script code in the context of the target user...

IBM WebSphere Cross-Site Request Forgery Vulnerability

IBM WebSphere Portal provides a framework for combining application or business mashups and provides a high-level tool to construct flexible, SOA-based solutions. A cross-site request forgery vulnerability exists in IBM WebSphere Portal that allows a remote attacker to construct a malicious URI,...

Drupal Finder Module Open Redirect Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Finder is one of the search modules. An open redirection vulnerability exists in the Drupal Finder module, which stems from the program's failure to adequately filter user-submitted...

DEBIAN-CVE-2014-2538

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...

UBUNTU-CVE-2013-7039

Stack-based buffer overflow in the MHDdigestauthcheck function in libmicrohttpd before 0.9.32, when MHDOPTIONCONNECTIONMEMORYLIMIT is set to a large value, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long URI in an authentication header...

DEBIAN-CVE-2013-4547

nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI...

PT-2013-1073

Name of the Vulnerable Software and Affected Versions Varnish versions prior to 3.0.5 Description The issue allows remote attackers to cause a denial of service, leading to a child-process crash and temporary caching outage. This can be achieved via a GET request with trailing whitespace characte...

DEBIAN-CVE-2011-3368

The modproxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to...

mod_dav: DoS (httpd child process crash) by parsing URI structure with missing path segments

The 1 modcache and 2 moddav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service process crash via a request that lacks a path...

Juniper Junos 8.5/9.0 J-Web Interface - '/configuration' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...

Spoofing of URI possible in Konqueror's address bar

konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...

Spoofing of URI possible in Konqueror's address bar

konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...