CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Github Security Blog•added 2018/10/15 10:03 p.m.•47 views

dojox vulnerable to unescaped string injection

In Dojo Toolkit before 1.14.0, there is unescaped string injection in dojox/Grid/DataGrid...

9.8CVSS9.2AI score0.0254EPSS

SaveExploits2References5Affected Software1

Veracode•added 2018/08/20 7:17 a.m.•36 views

Cross-Site Scripting (XSS)

This is Due to the unescaped quotes in dojox/Grid/DataGrid when editing rows, which would allow an attacker to inject arbitrary HTML and Javascript into a victim's browser. Which makes dojox vulnerable to cross-site scripting...

9.8CVSS8.9AI score0.0254EPSS

SaveExploits2References4Affected Software2

Rapid7 Vulnerability Database (full)•added 2018/08/18 12:00 a.m.•3 views

CVE-2018-15494: Improper Encoding or Escaping of Output

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid...

9.8CVSS8.1AI score0.0254EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by