SE
Vendor
Sencha
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2007-6758 | EJ Ext JS Sencha | 7.5 | Jan 23 | Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0 |
| CVE-2013-4691 | CO Connect Sencha | 6.1 | Dec 27 | Sencha Labs Connect has XSS with connect.methodOverride() |
| CVE-2013-7371 | CO Connect Sencha | 6.1 | Dec 11 | node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370) |
| CVE-2013-7370 | CO Connect Sencha | 6.1 | Dec 11 | node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware |
| CVE-2018-8046 | EJ Ext JS Sencha | 6.1 | Jul 5 | The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data |
| CVE-2018-3717 | CO Connect Sencha | 5.4 | Jun 7 | connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware |