MAL-2024-1756 Malicious code in @abb-americas/angular-components (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-5552 ReDoS in kubeflow/kubeflow

kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...

CVE-2024-5552 ReDoS in kubeflow/kubeflow

kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...

CVE-2024-5552

CVE-2024-5552 affects kubeflow/kubeflow, specifically the centraldashboard-angular backend component. The vulnerability arises from inefficient regular expression complexity in the email validation logic, enabling a remote, unauthenticated attacker to trigger a denial of service via crafted input...

SUSE CVE-2021-41174

Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the...

RHEL 9 : ceph (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - angularjs: Regular expression denial of service via the $resource service CVE-2023-26117 Note that Nessus has not...

RHEL 9 : firefox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wasm2c: DoS via crafted binary CVE-2023-31670 - Versions of the package angular from 1.2.21 are vulnerabl...

The vulnerability of the ng-srcset component in the application design and development environment for Angular applications allows attackers to trigger a service failure.

The vulnerability of the ng-srcset component in the application design and development environment for Angular is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

RHEL 8 : gjs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json5: Prototype Pollution in JSON5 via Parse Method CVE-2022-46175 Note that Nessus has not tested for this issue...

angular-workshops.de Cross Site Scripting vulnerability OBB-3932497

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

Angular-translate 跨站脚本漏洞

angular-translate is an AngularJS module in the angular-translate open source. A cross-site scripting vulnerability exists in Angular-translate version 2.19.1 and earlier, which stems from allowing cross-site scripting attacks via a crafted key used by the Translate command...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

PT-2024-25422 · Unknown · Angular-Translate

Name of the Vulnerable Software and Affected Versions: angular-translate versions through 2.19.1 Description: The issue allows for XSS attacks via a crafted key used by the translate directive. The vendor notes that there is no documentation indicating a key is supposed to be safe against XSS...

Malicious code in ui-common-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...

@bidvine/react-summernote (=2.0.2), @uday_test/wm_codegen_angular_app (=0.0.0) +14 more potentially affected by CVE-2024-29504 via summernote (>=0.5.9 <=0.8.18)

summernote NPM version =0.5.9, =1.0.2, =4.8.14, =4.9.23, =4.9.23, =4.9.23, =4.9.23, =5.0.6, =1.0.0, =0.0.1, =1.2.1 - wm-ng-webcomponent =1.0.1 and more Source cves: CVE-2024-29504 Source advisory: OSV:GHSA-4WH3-3WF2-39M9...

@angular/build (>=18.0.0 <=18.1.0-next.2), @avorati/strapi-plugin-preview (=1.0.1) +83 more potentially affected by CVE-2024-31207 via vite (>=5.2.0 <=5.2.4)

vite NPM version =5.2.0, =18.0.0, =5.0.0-alpha.4, =0.1.0-rc.8, =8.31.0, =3.0.2, =3.5.0, =4.1.0, =34.0.0, =2.1.3, =1.2.0, =0.2.24, =11.17.0, =2.0.0, =8.0.8, =8.1.0 and more Source cves: CVE-2024-31207 Source advisory: OSV:GHSA-8JHW-289H-JH2G...

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression backtracking in the ng-srcset directive. This potentially leads to Regular Expression Denial of Service ReDoS...