2888 matches found
Malicious Package
Overview angular-remove-diacritics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious Package
Overview zohocomponents-angular is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
MAL-2022-3209 Malicious code in freekws-devportal-api-client-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 964e73152194b8926217ca3e0d90526fe2a0e1223ef4b99a45ebd367193ce1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cross-site Scripting (XSS)
angular is vulnerable to cross-site scriptingXSS attacks. The library permits interpolation of elements due to insecure page caching, allowing an attacker to inject and execute malicious javascript on the victim's browser. This vulnerability only affects Internet Explorer...
GHSA-PRC3-VJFX-VHM9 Angular (deprecated package) Cross-site Scripting
All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...
10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3305 more potentially affected by CVE-2022-25869 via angular (>=1.0.8, <=1.8.3)
angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25869 Source advisory: OSV:GHSA-PRC3-VJFX-VHM9...
1k-tasks (>=2.3.0, <=3.6.1), @alitajs/remove_version (>=0.0.1, <=0.0.2) +408 more potentially affected by CVE-2022-25858 via terser (>=5.0.0, <=5.14.1)
terser NPM version =5.0.0, =2.3.0, =0.0.1, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.7.0-alpha.2, =2.7.0-alpha.1, =2.0.0-alpha.0, =2.8.0-canary.5, =10.0.0-beta.0, =0.1001.0-next.4, =1.6.3, =1.8.24 - @anyt/oro-webpack-config-builder 0.0.1 - @applegamer22/scr-web 1.0.0-alpha.24.3.1 and more Source cves:...
Angular (deprecated package) Cross-site Scripting
All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...
CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
DEBIAN-CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
Cross site scripting
All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
UBUNTU-CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
CVE-2022-25869
CVE-2022-25869 affects multiple Angular/AngularJS packages with an XSS through insecure IE page caching that allows textarea interpolation. Connected IBM advisory confirms impact on IBM Storage Copy Data Management: affected versions 2.2.0.0–2.2.26.0, with a fix available in 2.2.27.0 for Linux pl...
CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...
PT-2022-6869 · Microsoft +1 · Internet Explorer +1
Name of the Vulnerable Software and Affected Versions: angular versions prior to the fixed version Description: The issue is related to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, allowing interpolation of elements. This occurs because the application...
CVE-2022-25869: Improper Neutralization of Input During Web Page Generation
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...