Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2018-3717

nodejs-connect: XSS due to a lack of validation of file in directory.js middleware

connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.

CVSS 3.1 · 5.4 Medium EPSS 1.3% KEV · Not listed
Vendors
Sencha
Products
Connect
CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Sencha
Products
Debian Linux Connect
CVE-2013-4691

Sencha Labs Connect has XSS with connect.methodOverride()

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Sencha
Products
Connect