EUVD-2020-0309

Malware in sbrugna...

EUVD-2020-0326

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-5259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties...

Linux Distros Unpatched Vulnerability : CVE-2018-15494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid. CVE-2018-15494 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2019-10785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to...

Malicious code in dojox.layout.expandopane (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4d8c95926f5af3cacdfd043cd5ec597124451062eac060c9d24c418bf4d7fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-5259

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

Malicious code in @elastic-internal/dojox (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2112 Malicious code in @elastic-internal/dojox (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: Mulitple vulnerabilities in Dojo dojox repo may affect IBM Storage Scale

Summary Mulitple vulnerabilities in Dojo dojox repo may affect IBM Storage Scale GUI. Vulnerability Details CVEID:CVE-2020-5259 DESCRIPTION: Dojo dojox could allow a remote attacker to inject arbitrary code on the system, caused by a prototype pollution flaw. By injecting other values, an attacke...

@hpcc-js/dgrid-shim (>=0.0.29 <=0.1.12), bryaktestgrid (>=0.0.1 <=0.0.6) +3 more potentially affected by CVE-2018-6561 via dijit (>=1.10.3 <=1.13.0)

dijit NPM version =1.10.3, =0.0.29, =0.0.1, =0.1.0, =1.10.3, =0.0.1, =0.5.24 Source cves: CVE-2018-6561 Source advisory: OSV:GHSA-WP32-WQ34-2RQH...

The vulnerability of the jqMix method implementation in the dojox library (NPM package) allows an attacker to compromise data integrity.

The vulnerability of the jqMix method implementation in the dojox library NPM package is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the data...

The vulnerability of the `dojox.xmpp.util.xmlEncode` component in the dojox JavaScript library allows a attacker to compromise data integrity.

The vulnerability of the dojox.xmpp.util.xmlEncode component in the dojox JavaScript library is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

dojox (>=1.10.3 <=1.11.10) potentially affected by CVE-2020-4051 via dijit (>=1.10.3 <=1.11.10)

dijit NPM version =1.10.3, =1.10.3, =1.11.10 Source cves: CVE-2020-4051 Source advisory: OSV:GHSA-CXJC-R2FP-7MQ6...

Updated dojo packages fix security vulnerability

Updated dojo package fixes security vulnerabilities: In affected versions of dojo, the deepCopy method is vulnerable to prototype Pollution. An attacker could manipulate these attributes to overwrite, or pollute, a JavaScript application object prototype of the base object by injecting other valu...

CVE-2019-10785

A flaw was found in dojox. Cross-site scripting is possible as only the first occurrence of each character is encoded. The highest threat from this vulnerability is to data confidentiality and integrity...

Prototype Pollution

dojox is vulnerable to prototype pollution. A attacker is able to inject arbitrary Javascript construct prototype to overwrite or pollute base Objects, potentially resulting in arbitrary code execution...

CVE-2020-5259

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

CVE-2020-5259

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

DEBIAN-CVE-2020-5259

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...