CVE-2015-5654

Cross-site scripting XSS vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5654

Dojo Toolkit (before 1.2) is vulnerable to Cross-Site Scripting (XSS) due to improper validation of user-supplied input, enabling remote attackers to inject script/HTML via unspecified vectors. Several vendor advisories confirm this CVE-2015-5654 issue and recommend upgrading Dojo to a version wi...

CVE-2015-5654

Cross-site scripting XSS vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5654: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-7017

Name of the Vulnerable Software and Affected Versions Dojo Toolkit versions prior to 1.2.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. The package fails to sanitize HTML code in user-controlled input, allowing attackers to execute...

Dojo Toolkit vulnerable to cross-site scripting

Overview Dojo Toolkit is a software to assist in building web applications. Dojo Toolkit contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

JVN#13456571: Dojo Toolkit vulnerable to cross-site scripting

Dojo Toolkit is a software to assist in building web applications. Dojo Toolkit contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by t...

IBM Rational ClearQuest 7.1.1.x < 7.1.1.4 / 7.1.2.x < 7.1.2.1 Multiple Vulnerabilities (credentialed check)

The remote host is running a version of IBM Rational ClearQuest 7.1.1.x prior to 7.1.1.4 / 7.1.2.x prior to 7.1.2.1 installed. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists in the Dojo Toolkit that allows a remote attacker to read...

Multiple Cross-Site Scripting Vulnerabilities in IBM Dojo Toolkit

IBM Dojo Toolkit is IBM sponsored with the javascript language implementation of open source DHTML toolkit . IBM Dojo Toolkit has multiple cross-site scripting vulnerabilities that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 dojox/form/resources/uploader.swf aka upload.swf, 2 dojox/form/resources/fileuploader.swf aka fileupload.swf, 3 dojox/av/resources/audio.swf, and 4 dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1....

CVE-2014-8917

CVE-2014-8917 describes cross-site scripting in IBM Dojo Toolkit components (dojox/form/resources/uploader.swf, dojox/form/resources/fileuploader.swf, dojox/av/resources/audio.swf, dojox/av/resources/video.swf) used in IBM Social Media Analytics and other IBM products. The vulnerability arises fr...

CVE-2014-8917

Multiple cross-site scripting XSS vulnerabilities in 1 dojox/form/resources/uploader.swf aka upload.swf, 2 dojox/form/resources/fileuploader.swf aka fileupload.swf, 3 dojox/av/resources/audio.swf, and 4 dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1....

CVE-2014-8917: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 dojox/form/resources/uploader.swf aka upload.swf, 2 dojox/form/resources/fileuploader.swf aka fileupload.swf, 3 dojox/av/resources/audio.swf, and 4 dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1....

Amazon Linux AMI : php-ZendFramework (ALAS-2014-460)

The 1 ZendLdap class in Zend before 1.12.9 and 2 Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind. CVE-2014-8088 The 1.12.9, 2.2.8, and 2.3.3 releas...

CVE-2014-6196

Cross-site scripting XSS vulnerability in IBM Web Experience Factory WEF 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework WDF and Lotus Widget Factory LWF, allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Web Experience Factory WEF 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework WDF and Lotus Widget Factory LWF, allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere...

CVE-2014-6196

Cross-site scripting XSS vulnerability in IBM Web Experience Factory WEF 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework WDF and Lotus Widget Factory LWF, allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere...

CVE-2014-6196

The CVE-2014-6196 entry affects IBM Web Experience Factory (WEF) versions 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework (WDF) and Lotus Widget Factory (LWF). The root cause is a Dojo builder error in an unspecified WebSphere Portal configuration, which leads to improper construc...

CVE-2014-6196: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Web Experience Factory WEF 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework WDF and Lotus Widget Factory LWF, allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere...

Dojo Toolkit <= 1.4.1 dijit\tests\_testCommon.js theme Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser...