Lucene search
+L

411 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2022-25869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XS...

6.1CVSS6.6AI score0.0768EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•2 views

CVE-2025-4690: Inefficient Regular Expression Complexity

A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a Regular expression Denial of Service ReDoS...

4.3CVSS5.6AI score0.00204EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2025-2336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass...

4.8CVSS6.3AI score0.00306EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2019-10768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In AngularJS before 1.7.9 the function merge could be tricked into adding or modifying properties of Object.prototype using a proto payload. CVE-2019-10768 Note...

7.5CVSS6.8AI score0.01982EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/15 12:00 a.m.•19 views

TencentOS Server 4: grafana (TSSA-2025:0594)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0594 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

6.1CVSS6.6AI score0.0768EPSS
SaveExploits4References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in angularjs-in-view (npm)

The package angularjs-in-view was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-14537 Malicious code in angularjs-in-view (npm)

The package angularjs-in-view was found to contain malicious code...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2024-8372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a...

4.8CVSS6.3AI score0.00609EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-8373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can...

4.8CVSS6.2AI score0.00635EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/06/06 5:21 p.m.•14 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00306EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/06/04 6:30 p.m.•6 views

Incomplete Filtering of Special Elements

Overview org.webjars.bower:angular-sanitize is an AngularJS module for sanitizing HTML Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements through the ngSanitize module. An attacker can manipulate image sources and perform content spoofing by injecting...

6.3CVSS6.7AI score0.00306EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/06/04 6:30 p.m.•24 views

AngularJS Incomplete Filtering of Special Elements vulnerability

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.9AI score0.00306EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2025/06/04 6:30 p.m.•15 views

GHSA-4P4W-6HG8-63WX AngularJS Incomplete Filtering of Special Elements vulnerability

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00306EPSS
SaveExploits0References6
NVD
NVD
•added 2025/06/04 5:15 p.m.•30 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS0.00306EPSS
SaveExploits0References4
OSV
OSV
•added 2025/06/04 5:15 p.m.•11 views

DEBIAN-CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.8AI score0.00306EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2025/06/04 5:15 p.m.•14 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00306EPSS
SaveExploits0References5
OSV
OSV
•added 2025/06/04 5:15 p.m.•17 views

UBUNTU-CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS5.8AI score0.00306EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/06/04 4:32 p.m.•14 views

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS5AI score0.00306EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/04 4:32 p.m.•262 views

CVE-2025-2336

CVE-2025-2336 concerns AngularJS ngSanitize: an improper sanitization flaw allows bypassing image source restrictions via the href and xlink:href attributes in SVG elements. The root cause is inadequate sanitization, which can lead to Content Spoofing and potentially degrade application performa...

4.8CVSS6.7AI score0.00306EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/06/04 4:32 p.m.•69 views

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS0.00306EPSS
SaveExploits0References2
Rows per page
Query Builder