Xxe

Sencha Labs Connect has XSS with connect.methodOverride...

CVE-2013-4691

Sencha Labs Connect has XSS with connect.methodOverride...

CVE-2013-4691

The CVE-2013-4691 entry documents an XSS vulnerability in Sencha Labs Connect (Node.js HTTP server framework) via the connect.methodOverride() function. The root cause is a lack of proper validation of client-supplied data by the web application, enabling potential execution of client-side code. ...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

Cross site scripting

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

UBUNTU-CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

DEBIAN-CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

Code injection

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

UBUNTU-CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7371

CVE-2013-7371 affects node-connects prior to 2.8.2, where a cross-site scripting vulnerability exists in the Sencha Labs Connect middleware (resulting from an incomplete fix for CVE-2013-7370). Impact is XSS via the Connect middleware as described in multiple sources. A remediation is to update t...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7370

CVE-2013-7370 concerns node-connect before 2.8.1, which has an XSS vulnerability in the Sencha Labs Connect middleware. Affected component: node-connect (Sencha Connect middleware). Root cause/impact: XSS in the middleware could reflect or inject script via user input; exploitation status is not ...

CVE-2019-1458

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. Recent assessments: gwillcox-r7 at October 19, 2020 5:31pm UTC reported: Known as WizardOpium for its use in the...

OpenBSD Multiple Authentication Vulnerabilities

Multiple authentication vulnerabilities in OpenBSD have been disclosed by Qualys Research Labs. The vulnerabilities are assigned following CVEs: CVE-2019-19522, CVE-2019-19521, CVE-2019-19520, CVE-2019-19519. OpenBSD developers have confirmed the vulnerabilities and also provided a quick response...