dojotoolkit kayıtları
dojotoolkit üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %81,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-116 Improper Encoding or Escaping of Output1
- CWE-16 Configuration1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2010-2276İstismar yok | The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.xdojotoolkit · dojo · CWE-16 | Kritik10,0 | — | %3,2 | 15 Haz 2010 |
40Planlayın | CVE-2018-15494İstismar yok | In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.dojotoolkit · dojo · CWE-116 | Kritik9,8 | — | %2,5 | 17 Ağu 2018 |
40Planlayın | CVE-2010-2272İstismar yok | Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors.dojotoolkit · dojo | Kritik10,0 | — | %1,3 | 15 Haz 2010 |
24İzleyin | CVE-2018-1000665İstismar yok | Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOdojotoolkit · dojo · CWE-79 | Orta6,1 | — | %1,3 | 6 Eyl 2018 |
24İzleyin | CVE-2018-6561İstismar yok | dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.dojotoolkit · dojo · CWE-79 | Orta6,1 | — | %1,2 | 2 Şub 2018 |
18İzleyin | CVE-2010-2273Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, dojotoolkit · dojo · CWE-79 | Orta4,3 | — | %4,5 | 15 Haz 2010 |
18İzleyin | CVE-2007-6726İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attacapache · struts · CWE-79 | Orta4,3 | — | %3,4 | 9 Nis 2009 |
18İzleyin | CVE-2010-2275Kavram kanıtı | Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject ardojotoolkit · dojo · CWE-79 | Orta4,3 | — | %2,9 | 15 Haz 2010 |
18İzleyin | CVE-2015-5654İstismar yok | Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspedojotoolkit · dojo · CWE-79 | Orta4,3 | — | %2,2 | 10 Eki 2015 |
18İzleyin | CVE-2010-2274İstismar yok | Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x befdojotoolkit · dojo | Orta4,3 | — | %1,9 | 15 Haz 2010 |
17İzleyin | CVE-2008-6681İstismar yok | Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML vdojotoolkit · dojo · CWE-79 | Orta4,3 | — | %1,1 | 9 Nis 2009 |
- CVE-2010-227641Planlayın
The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x
KritikCVSS 10,0İstismar yokEPSS %3dojotoolkit · dojo15 Haz 2010
- CVE-2018-1549440Planlayın
In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
KritikCVSS 9,8İstismar yokEPSS %3dojotoolkit · dojo17 Ağu 2018
- CVE-2010-227240Planlayın
Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors.
KritikCVSS 10,0İstismar yokEPSS %1dojotoolkit · dojo15 Haz 2010
- CVE-2018-100066524İzleyin
Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDO
OrtaCVSS 6,1İstismar yokEPSS %1dojotoolkit · dojo6 Eyl 2018
- CVE-2018-656124İzleyin
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.
OrtaCVSS 6,1İstismar yokEPSS %1dojotoolkit · dojo2 Şub 2018
- CVE-2010-227318İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3,
OrtaCVSS 4,3Kavram kanıtıEPSS %5dojotoolkit · dojo15 Haz 2010
- CVE-2007-672618İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attac
OrtaCVSS 4,3İstismar yokEPSS %3apache · struts9 Nis 2009
- CVE-2010-227518İzleyin
Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject ar
OrtaCVSS 4,3Kavram kanıtıEPSS %3dojotoolkit · dojo15 Haz 2010
- CVE-2015-565418İzleyin
Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspe
OrtaCVSS 4,3İstismar yokEPSS %2dojotoolkit · dojo10 Eki 2015
- CVE-2010-227418İzleyin
Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x bef
OrtaCVSS 4,3İstismar yokEPSS %2dojotoolkit · dojo15 Haz 2010
- CVE-2008-668117İzleyin
Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML v
OrtaCVSS 4,3İstismar yokEPSS %1dojotoolkit · dojo9 Nis 2009