Lucene search
+L

29 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2013-4544

Malware in sbrugna...

6.1CVSS6.3AI score0.00649EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2022-2867

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.01435EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2013-7370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware CVE-2013-7370 Note that Nessus relies on the presence of the package as reported by the...

6.1CVSS6.3AI score0.01417EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 6:10 a.m.•19 views

CVE-2013-4691

Sencha Labs Connect has XSS with connect.methodOverride...

6.1CVSS6.3AI score0.00649EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/05/05 12:29 a.m.•61 views

Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware

node-connect before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370 Overview Connect is a stack of middleware that is executed in order in each request. The "methodOverride" middleware allows the http post to override the meth...

6.1CVSS6.3AI score0.01435EPSS
SaveExploits0References11Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/05 12:29 a.m.•91 views

GHSA-6W62-83G6-RFHJ Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware

node-connect before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370 Overview Connect is a stack of middleware that is executed in order in each request. The "methodOverride" middleware allows the http post to override the meth...

6.1CVSS5.4AI score0.01435EPSS
SaveExploits0References11
CNVD
CNVD
•added 2020/01/02 12:00 a.m.•27 views

Sencha Labs Connect Cross-Site Scripting Vulnerability

Sencha Labs Connect is an extensible HTTP server framework for Node.js. A cross-site scripting vulnerability exists in the 'connect.methodOverride' function in Sencha Labs Connect. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker cou...

6.1CVSS6.4AI score0.00649EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/27 4:15 p.m.•40 views

CVE-2013-4691

Sencha Labs Connect has XSS with connect.methodOverride...

6.1CVSS6.1AI score0.00649EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/27 4:15 p.m.•29 views

Xxe

Sencha Labs Connect has XSS with connect.methodOverride...

4.3CVSS6.3AI score0.00649EPSS
SaveExploits0References1
CVE
CVE
•added 2019/12/27 3:39 p.m.•91 views

CVE-2013-4691

The CVE-2013-4691 entry documents an XSS vulnerability in Sencha Labs Connect (Node.js HTTP server framework) via the connect.methodOverride() function. The root cause is a lack of proper validation of client-supplied data by the web application, enabling potential execution of client-side code. ...

6.1CVSS6AI score0.00649EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/12/27 3:39 p.m.•42 views

CVE-2013-4691

Sencha Labs Connect has XSS with connect.methodOverride...

6.1AI score0.00649EPSS
SaveExploits0References1
Mend
Mend
•added 2019/12/27 3:39 p.m.•8 views

CVE-2013-4691

Sencha Labs Connect has XSS with connect.methodOverride...

6.1CVSS0.00649EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/27 12:00 a.m.•8 views

CVE-2013-4691: Improper Neutralization of Input During Web Page Generation

Sencha Labs Connect has XSS with connect.methodOverride...

6.1CVSS6.3AI score0.00649EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/12/27 12:00 a.m.•7 views

PT-2019-6964

Name of the Vulnerable Software and Affected Versions Sencha Labs Connect affected versions not specified Description The issue is related to a cross-site scripting XSS problem. It affects the connect.methodOverride function, which is used to override the HTTP method. The estimated number of...

6.1CVSS0.00649EPSS
SaveExploits0References3
NVD
NVD
•added 2019/12/11 3:15 p.m.•52 views

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

6.1CVSS6.1AI score0.01435EPSS
SaveExploits0References6
Prion
Prion
•added 2019/12/11 3:15 p.m.•39 views

Cross site scripting

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

4.3CVSS6.1AI score0.01435EPSS
SaveExploits0References6Affected Software2
osv_ubuntu
osv_ubuntu
•added 2019/12/11 3:15 p.m.•23 views

UBUNTU-CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

6.1CVSS5.8AI score0.01435EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/12/11 3:15 p.m.•31 views

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

6.1CVSS5.9AI score0.01435EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2019/12/11 2:15 p.m.•19 views

DEBIAN-CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

6.1CVSS6.3AI score0.01417EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/11 2:15 p.m.•33 views

Code injection

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

4.3CVSS5.9AI score0.01417EPSS
SaveExploits0References7Affected Software4
Rows per page
Query Builder