4620 matches found
GHSA-R3HF-Q8Q7-FV2P Angular critical CSS inlining Cross-site Scripting Vulnerability Advisory
Impact Angular Universal applications on 16.1.0 and 16.1.1 using critical CSS inlining are vulnerable to a cross-site scripting XSS attack where an attacker can trick another user into visiting a page which injects malicious JavaScript. Angular CLI applications without Universal do perform critic...
Angular critical CSS inlining Cross-site Scripting Vulnerability Advisory
Impact Angular Universal applications on 16.1.0 and 16.1.1 using critical CSS inlining are vulnerable to a cross-site scripting XSS attack where an attacker can trick another user into visiting a page which injects malicious JavaScript. Angular CLI applications without Universal do perform critic...
PT-2023-33057
Name of the Vulnerable Software and Affected Versions Angular Universal versions 16.1.0 through 16.1.1 Description The issue allows an attacker to trick another user into visiting a page that injects malicious JavaScript, resulting in a cross-site scripting XSS attack. This occurs when critical C...
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Angular
Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Angular. Vulnerability Details CVEID:CVE-2023-26117 DESCRIPTION: AngularJS is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the $resource service...
MGASA-2023-0215 Updated glances packages fix security vulnerability
Regular Expression Denial of Service ReDoS in angular CVE-2022-25844...
Updated glances packages fix security vulnerability
Regular Expression Denial of Service ReDoS in angular CVE-2022-25844...
GHSA-MRCJ-5QXR-VHP2 angular-ui-notification Cross-site Scripting vulnerability
angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...
@copyleaks/plagiarism-report (>=1.0.0, <=1.0.13), bzz-ui (>=1.0.1, <=1.11.14) +8 more potentially affected by CVE-2023-34840 via angular-ui-notification (>=0.1.0, <=0.3.6)
angular-ui-notification NPM version =0.1.0, =1.0.0, =1.0.1, =2.8.46, =2.8.16, =1.0.0, =1.1.1, =1.0.0, =0.0.1, =0.0.6 - wservice-web 1.0.0 Source cves: CVE-2023-34840 Source advisory: GHSA-MRCJ-5QXR-VHP2...
angular-ui-notification Cross-site Scripting vulnerability
angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...
@copyleaks/plagiarism-report (>=1.0.0, <=1.0.13), bzz-ui (>=1.0.1, <=1.11.14) +8 more potentially affected by CVE-2023-34840 via angular-ui-notification (>=0.1.0, <=0.3.6)
angular-ui-notification NPM version =0.1.0, =1.0.0, =1.0.1, =2.8.46, =2.8.16, =1.0.0, =1.1.1, =1.0.0, =0.0.1, =0.0.6 - wservice-web 1.0.0 Source cves: CVE-2023-34840 Source advisory: OSV:GHSA-MRCJ-5QXR-VHP2...
CVE-2023-34840
angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2023-34840
angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...
Cross site scripting
angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...
Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to the Angular JS (CVE-2023-26116, CVE-2023-26117, CVE-2023-26118)
Summary The Discovery Connectors in IBM App Connect Enterprise are vulnerable to a denial of service due to the Angular JS CVE-2023-26116, CVE-2023-26117, CVE-2023-26118. The fix removes Angular JS. Vulnerability Details CVEID:CVE-2023-26117 DESCRIPTION: AngularJS is vulnerable to a denial of...
angular-ui-notification Cross-site Scripting Vulnerability
angular-ui-notification is a library by Alexey Avramchik personal developer. Used to provide simple notifications, animated using Bootstrap 3 styles and css transformations. A security vulnerability exists in Angular angular-ui-notification version v0.1.0, v0.2.0, v0.3.6, which stems from a...
CVE-2023-34840
CVE-2023-34840 affects angular-ui-notification versions 0.1.0, 0.2.0, and 0.3.6, which are reported to contain a cross-site scripting (XSS) vulnerability. The connected documents consistently describe an XSS flaw in this library; however, they do not provide concrete technical details such as the...
CVE-2023-34840
angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2023-34840: Improper Neutralization of Input During Web Page Generation
angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...