Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
DojotoolkitDojo

11 matches found

CVE
CVE•added 2018/08/18 2:29 a.m.•768 views

CVE-2018-15494

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

9.8CVSS9.4AI score0.0064EPSS
CVE
CVE•added 2018/09/06 5:29 p.m.•149 views

CVE-2018-1000665

Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - d...

6.1CVSS5.8AI score0.00237EPSS
CVE
CVE•added 2010/06/15 2:30 p.m.•114 views

CVE-2010-2276

The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact v...

10CVSS6.7AI score0.03514EPSS
CVE
CVE•added 2018/02/02 3:29 p.m.•93 views

CVE-2018-6561

dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.

6.1CVSS5.7AI score0.00199EPSS
CVE
CVE•added 2010/06/15 2:30 p.m.•74 views

CVE-2010-2273

Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to dojo/resources/iframe_history...

4.3CVSS5.7AI score0.2283EPSS
Web
CVE
CVE•added 2010/06/15 2:30 p.m.•74 views

CVE-2010-2275

Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html.

4.3CVSS5.7AI score0.15953EPSS
Web
CVE
CVE•added 2015/10/11 1:59 a.m.•66 views

CVE-2015-5654

Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.5AI score0.00297EPSS
CVE
CVE•added 2009/04/09 3:8 p.m.•63 views

CVE-2007-6726

Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.html in src/io/.

4.3CVSS5.8AI score0.01495EPSS
CVE
CVE•added 2009/04/09 3:8 p.m.•60 views

CVE-2008-6681

Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.

4.3CVSS5.8AI score0.00285EPSS
CVE
CVE•added 2010/06/15 2:30 p.m.•56 views

CVE-2010-2274

Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resour...

4.3CVSS6.9AI score0.00711EPSS
CVE
CVE•added 2010/06/15 2:30 p.m.•40 views

CVE-2010-2272

Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors.

10CVSS6.6AI score0.00462EPSS