sencha kayıtları
sencha üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
44Planlayın | CVE-2018-8046İstismar yok | The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data.sencha · ext js · CWE-79 | Orta6,1 | — | %66,6 | 5 Tem 2018 |
30İzleyin | CVE-2007-6758İstismar yok | Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.sencha · ext js · CWE-918 | Yüksek7,5 | — | %1,3 | 23 Oca 2020 |
24İzleyin | CVE-2013-7371İstismar yok | node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370sencha · connect · CWE-79 | Orta6,1 | — | %1,4 | 11 Ara 2019 |
24İzleyin | CVE-2013-7370İstismar yok | node-connect before 2.8.1 has XSS in the Sencha Labs Connect middlewaresencha · connect · CWE-79 | Orta6,1 | — | %1,4 | 11 Ara 2019 |
24İzleyin | CVE-2013-4691İstismar yok | Sencha Labs Connect has XSS with connect.methodOverride()sencha · connect · CWE-79 | Orta6,1 | — | %0,6 | 27 Ara 2019 |
21İzleyin | CVE-2018-3717İstismar yok | connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.jsencha · connect · CWE-79 | Orta5,4 | — | %1,3 | 6 Haz 2018 |
- CVE-2018-804644Planlayın
The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data.
OrtaCVSS 6,1İstismar yokEPSS %67sencha · ext js5 Tem 2018
- CVE-2007-675830İzleyin
Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.
YüksekCVSS 7,5İstismar yokEPSS %1sencha · ext js23 Oca 2020
- CVE-2013-737124İzleyin
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370
OrtaCVSS 6,1İstismar yokEPSS %1sencha · connect11 Ara 2019
- CVE-2013-737024İzleyin
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware
OrtaCVSS 6,1İstismar yokEPSS %1sencha · connect11 Ara 2019
- CVE-2013-469124İzleyin
Sencha Labs Connect has XSS with connect.methodOverride()
OrtaCVSS 6,1İstismar yokEPSS %1sencha · connect27 Ara 2019
- CVE-2018-371721İzleyin
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.j
OrtaCVSS 5,4İstismar yokEPSS %1sencha · connect6 Haz 2018