hslayers-ng (>=0.4.1, <=0.5.4) potentially affected by CVE-2022-25869 via angular-loader (1.4.14)

angular-loader NPM version 1.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on angular-loader and may be impacted: - hslayers-ng =0.4.1, =0.5.4 Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

@amitport/useful (>=0.5.0, <=0.5.2), @bloomreach/hippo-theme (2.2.3) +148 more potentially affected by CVE-2022-25869 via angular-animate (>=1.2.32, <=1.5.11)

angular-animate NPM version =1.2.32, =0.5.0, =1.2.1, =1.0.0, =1.0.0, =3.2.13, =3.0.11, =3.0.1, =3.0.7, =3.2.17, =3.0.62, =3.0.0, =3.0.1, =3.3.1 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @alancnet/material-framework (>=1.0.3, <=1.0.18) +222 more potentially affected by CVE-2022-25869 via angular-route (>=1.6.1, <=1.8.3)

angular-route NPM version =1.6.1, =4.13.7-rc4, =1.0.3, =0.0.15, =0.0.7, =0.1.0, =1.0.0, =1.4.0, =0.0.5, =0.4.47, =1.0.0, =3.1.0, =3.0.11, =3.0.1, =3.0.3 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +2860 more potentially affected by CVE-2022-25869 via angular (>=1.6.0, <=1.8.3)

angular NPM version =1.6.0, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100) +139 more potentially affected by CVE-2022-25869 via angular-cookies (>=1.6.0, <=1.8.3)

angular-cookies NPM version =1.6.0, =4.13.7-rc4, =1.4.156, =0.2.108, =0.0.1, =0.0.15, =0.1.0, =1.0.3, =0.2.1, =4.11.0, =4.0.0, =4.10.0, =4.13.5-1, =5.3.0, =1.0.5, =2.1.3 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

@amitport/useful (>=0.5.0, <=0.5.2), @nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0) +84 more potentially affected by CVE-2022-25869 via angular-route (>=1.2.17-build.163.1, <=1.5.11)

angular-route NPM version =1.2.17-build.163.1, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.1.53 - @ohos-ports/nuskin-ns-agelocme-mobile 3.14.2-beta.0 - @ohos-ports/nuskin-ns-checkout-mobile 3.14.2-beta.0 - @openmrs/openmrs-contrib-uicommons...

@b1cloud/angular-weekly-scheduler (>=0.0.8, <=0.0.13), @covisint/cui-i18n (>=1.0.3, <=1.0.20) +25 more potentially affected by CVE-2022-25869 via angular-i18n (>=1.6.1, <=1.8.3)

angular-i18n NPM version =1.6.1, =0.0.8, =1.0.3, =0.2.1, =1.0.0, =1.0.0, =5.3.0, =3.0.0, =0.5.0, =1.1.0, =1.0.3, =1.1.1 - angular-timepicker 1.0.11 - angular-weekly-scheduler 0.0.6 - easypage-editor 0.1.0 - gassman 1.0.0 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

@adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100), @alancnet/material-framework (>=1.0.3, <=1.0.18) +229 more potentially affected by CVE-2022-25869 via angular-aria (>=1.6.0, <=1.8.3)

angular-aria NPM version =1.6.0, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.0, =1.0.0, =5.3.0, =1.0.1, =0.0.1, =1.0.5, =0.9.3, =0.1.0, =0.1.0, =0.18.9 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

@ardimedia/angular-portal-azure (>=0.2.2-beta, <=0.2.346), @benningfield-group/bgi (>=0.1.1, <=0.5.0) +177 more potentially affected by CVE-2022-25869 via angular-resource (>=1.6.1, <=1.8.3)

angular-resource NPM version =1.6.1, =0.2.2-beta, =0.1.1, =1.0.0, =1.0.0, =1.0.3, =0.2.1, =1.0.1, =2.0.0, =1.0.0, =0.5.0, =1.0.5, =0.9.3, =0.1.0, =0.11.7 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

@amitport/useful (>=0.5.0, <=0.5.2), @bloomreach/hippo-theme (2.2.3) +46 more potentially affected by CVE-2022-25869 via angular-aria (>=1.4.5, <=1.5.11)

angular-aria NPM version =1.4.5, =0.5.0, =1.0.0, =1.0.0, =1.2.1, =2.4.0, =0.10.4, =4.0.0, =0.2.4, =0.0.4, =0.0.10, =0.0.1, =1.1.9, =2.1.9, =2.1.13 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

40au-isteven-angular-multiselect (4.0.0), @appirio/demo-scoped-pkg (>=2.4.1, <=2.8.0) +160 more potentially affected by CVE-2022-25869 via angular-mocks (>=1.6.1, <=1.8.3)

angular-mocks NPM version =1.6.1, =2.4.1, =0.2.3, =2.3.0, =1.0.0, =2.8.3-2, =0.0.7, =0.0.1-rc.1, =0.0.1-alpha.0, =1.0.0, =0.2.0, =42.0.0-beta.0, =53.0.1 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

@alancnet/material-framework (>=1.0.3, <=1.0.18), @alffiedev/alffie-components (>=1.0.0, <=1.0.13) +224 more potentially affected by CVE-2022-25869 via angular-messages (>=1.6.0, <=1.8.3)

angular-messages NPM version =1.6.0, =1.0.3, =1.0.0, =0.0.1, =0.2.1, =1.0.0-beta.2, =1.0.0, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.1, =1.4.3, =1.0.0, =1.0.0, =1.5.0 and more Source cves: CVE-2022-25869 Source advisory: MEND:CVE-2022-25869...

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

PT-2022-6869 · Microsoft +1 · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: angular versions prior to the fixed version Description: The issue is related to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, allowing interpolation of elements. This occurs because the application...

Angular cross-site scripting vulnerabilities

Angular is a development platform. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. A cross-site scripting vulnerability exists in Angular, which stems from an insecure page cache in Internet Explorer that allows the insertion of textarea...

CVE-2022-25869: Improper Neutralization of Input During Web Page Generation

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3299 more potentially affected by CVE-2022-25869 via angular (>=0.0.1, <=1.8.3)

angular NPM version =0.0.1, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25869 Source advisory: SNYK:JS-ANGULAR-2949781...

Cross-site Scripting (XSS)

Overview angular is a package that lets you write client-side web applications as if you had a smarter browser. It also lets you use HTML as your template language and lets you extend HTML’s syntax to express your application’s components clearly and succinctly. Affected versions of this package...

MAL-2022-6742 Malicious code in ugentec-framework-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a91b6a72d36e1f86952649dd1acf051dd8bc358d059c4ebe50b229b77170ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...