Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:18 p.m.0 views

CVE-2026-3951

A security flaw has been discovered in LockerProject Locker 0.0.0/0.0.1/0.1.0. Affected is the function authIsAwesome of the file source-code/Locker-master/Ops/registry.js of the component Error Response Handler. The manipulation of the argument ID results in cross site scripting. The attack can ...

5.3CVSS4.1AI score0.0005EPSS
Exploits0References1
NVD
NVD
added 2026/03/11 8:16 p.m.3 views

CVE-2026-3951

A security flaw has been discovered in LockerProject Locker 0.0.0/0.0.1/0.1.0. Affected is the function authIsAwesome of the file source-code/Locker-master/Ops/registry.js of the component Error Response Handler. The manipulation of the argument ID results in cross site scripting. The attack can ...

5.3CVSS0.0005EPSS
Exploits0References6
OSV
OSV
added 2026/03/11 8:16 p.m.1 views

CVE-2026-3951

A security flaw has been discovered in LockerProject Locker 0.0.0/0.0.1/0.1.0. Affected is the function authIsAwesome of the file source-code/Locker-master/Ops/registry.js of the component Error Response Handler. The manipulation of the argument ID results in cross site scripting. The attack can ...

4.3CVSS4.1AI score0.0005EPSS
Exploits0References6
CVE
CVE
added 2026/03/11 7:32 p.m.16 views

CVE-2026-3951

CVE-2026-3951 pertains to LockerProject Locker versions 0.0.0/0.0.1/0.1.0. The vulnerability lies in the function authIsAwesome in file source-code/Locker-master/Ops/registry.js (component: Error Response Handler), where manipulation of the argument ID enables cross-site scripting. The issue is e...

5.3CVSS4.3AI score0.0005EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/03/11 7:32 p.m.0 views

CVE-2026-3951 LockerProject Locker Error Response registry.js authIsAwesome cross site scripting

A security flaw has been discovered in LockerProject Locker 0.0.0/0.0.1/0.1.0. Affected is the function authIsAwesome of the file source-code/Locker-master/Ops/registry.js of the component Error Response Handler. The manipulation of the argument ID results in cross site scripting. The attack can ...

5.3CVSS4.3AI score0.0005EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.3 views

Locker 代码注入漏洞

Locker is an open-source personal data aggregation and management platform developed by The Locker Project. Versions 0.0.0, 0.0.1, and 0.1.0 of Locker contain code injection vulnerabilities. These vulnerabilities stem from incorrect operations on the authIsAwesome parameter ID in the file...

5.3CVSS5.7AI score0.0005EPSS
Exploits0References6
Rows per page
Query Builder