DO
Vendor
Dojotoolkit
11
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-1000665 | DO Dojo Dojotoolkit | 6.1 | Sep 6 | Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and… |
| CVE-2018-15494 | DO Dojo Dojotoolkit | 9.8 | Aug 18 | In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid |
| CVE-2018-6561 | DO Dojo Dojotoolkit | 6.1 | Feb 2 | dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element |
| CVE-2015-5654 | DO Dojo Dojotoolkit | – | Oct 11 | Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |
| CVE-2010-2276 | DO Dojo Dojotoolkit | – | Jun 15 | The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2… |
| CVE-2010-2275 | DO Dojo Dojotoolkit | – | Jun 15 | Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2010-2274 | DO Dojo Dojotoolkit | – | Jun 15 | Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to… |
| CVE-2010-2273 | DO Dojo Dojotoolkit | – | Jun 15 | Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote… |
| CVE-2010-2272 | DO Dojo Dojotoolkit | – | Jun 15 | Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors |
| CVE-2008-6681 | DO Dojo Dojotoolkit | – | Apr 9 | Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element |
| CVE-2007-6726 | DO Dojo Dojotoolkit | – | Apr 9 | Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or… |