495 matches found
EUVD-2010-2284
Malware in sbrugna...
EUVD-2010-2286
Malware in sbrugna...
EUVD-2020-0349
Malware in sbrugna...
EUVD-2020-0702
Malware in sbrugna...
EUVD-2014-6082
Malware in sbrugna...
EUVD-2022-0644
Malicious code in bioql PyPI...
EUVD-2023-39131
Malicious code in bioql PyPI...
EUVD-2022-5385
Malicious code in bioql PyPI...
EUVD-2022-5192
Malicious code in bioql PyPI...
EUVD-2022-4593
Malicious code in bioql PyPI...
EUVD-2022-5607
Malicious code in bioql PyPI...
Security Bulletin: TS4500 Tape Library/Diamondback Tape Library addresses security vulnerability CVE-2021-23450
Summary The tape library web GUI used an outdated version of the JavaScript library dojo.js containing a prototype pollution vulnerability. This could potentially be leveraged to facilitate XSS attacks in the browser, or, if executed server-side, to enable remote code execution. The issue has bee...
Security Bulletin: There is a vulnerability in dojo-1.17.3.js used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2021-23450, CVE-2008-6681, CVE-2010-2273)
Summary There is a vulnerability in dojo-1.17.3.js used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. CWE:CWE-1321: Improperly...
Linux Distros Unpatched Vulnerability : CVE-2021-23450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. CVE-2021-23450 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2020-5258
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of dojo NPM package, the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properti...
Linux Distros Unpatched Vulnerability : CVE-2018-6561
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element. CVE-2018-6561 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2018-15494
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid. CVE-2018-15494 Note that Nessus relies on the presence of the package a...
Linux Distros Unpatched Vulnerability : CVE-2018-1000665
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and...
Malicious code in dojo.data.itemfilereadstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5248266d6f2bd26fd740923ccbb40e78dcc1ed93f59dfbaf27e9b51c212f6a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5156 Malicious code in dojo.data.itemfilereadstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5248266d6f2bd26fd740923ccbb40e78dcc1ed93f59dfbaf27e9b51c212f6a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...