EUVD-2022-4593

Malicious code in bioql PyPI...

EUVD-2023-39131

Malicious code in bioql PyPI...

EUVD-2022-5385

Malicious code in bioql PyPI...

EUVD-2022-5607

Malicious code in bioql PyPI...

EUVD-2022-0644

Malicious code in bioql PyPI...

EUVD-2022-5192

Malicious code in bioql PyPI...

Security Bulletin: TS4500 Tape Library/Diamondback Tape Library addresses security vulnerability CVE-2021-23450

Summary The tape library web GUI used an outdated version of the JavaScript library dojo.js containing a prototype pollution vulnerability. This could potentially be leveraged to facilitate XSS attacks in the browser, or, if executed server-side, to enable remote code execution. The issue has bee...

Security Bulletin: There is a vulnerability in dojo-1.17.3.js used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2021-23450, CVE-2008-6681, CVE-2010-2273)

Summary There is a vulnerability in dojo-1.17.3.js used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. CWE:CWE-1321: Improperly...

Linux Distros Unpatched Vulnerability : CVE-2021-23450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. CVE-2021-23450 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2020-5258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of dojo NPM package, the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properti...

Linux Distros Unpatched Vulnerability : CVE-2018-6561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element. CVE-2018-6561 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2018-15494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid. CVE-2018-15494 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2018-1000665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and...

MAL-2025-5156 Malicious code in dojo.data.itemfilereadstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5248266d6f2bd26fd740923ccbb40e78dcc1ed93f59dfbaf27e9b51c212f6a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dojo.data.itemfilereadstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5248266d6f2bd26fd740923ccbb40e78dcc1ed93f59dfbaf27e9b51c212f6a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 16.04 LTS / 20.04 LTS / 22.04 LTS : Dojo vulnerabilities (USN-7569-1)

The remote Ubuntu 16.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7569-1 advisory. It was discovered that Dojo did not correctly handle DataGrids. An attacker could possibly use this issue to execute arbitrary...

USN-7569-1 dojo vulnerabilities

It was discovered that Dojo did not correctly handle DataGrids. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2018-15494 It was discovered that Dojo was vulnerable to prototype pollution. An attacker could...

USN-7569-1: Dojo vulnerabilities

It was discovered that Dojo did not correctly handle DataGrids. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2018-15494 It was discovered that Dojo was vulnerable to prototype pollution. An attacker could...

Malicious code in dojo.aspect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d31fd63b97c3cdde47f88984fbd8825829cf78c16098685c438206151cbc31f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-35097

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Internet Marketing Dojo WP Affiliate Links plugin = 0.1.1 versions...