Lucene search
+L

389 matches found

OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-14537 Malicious code in angularjs-in-view (npm)

The package angularjs-in-view was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in angularjs-in-view (npm)

The package angularjs-in-view was found to contain malicious code...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2024-8372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a...

4.8CVSS6.3AI score0.00609EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-8373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can...

4.8CVSS6.2AI score0.00635EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/06/06 5:21 p.m.•12 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00306EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/06/04 6:30 p.m.•5 views

Incomplete Filtering of Special Elements

Overview org.webjars.bower:angular-sanitize is an AngularJS module for sanitizing HTML Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements through the ngSanitize module. An attacker can manipulate image sources and perform content spoofing by injecting...

6.3CVSS6.7AI score0.00306EPSS
SaveExploits0References2
OSV
OSV
•added 2025/06/04 6:30 p.m.•13 views

GHSA-4P4W-6HG8-63WX AngularJS Incomplete Filtering of Special Elements vulnerability

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00306EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2025/06/04 6:30 p.m.•21 views

AngularJS Incomplete Filtering of Special Elements vulnerability

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.9AI score0.00306EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2025/06/04 5:15 p.m.•8 views

DEBIAN-CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.8AI score0.00306EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/04 5:15 p.m.•25 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS0.00306EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2025/06/04 5:15 p.m.•12 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00306EPSS
SaveExploits0References5
OSV
OSV
•added 2025/06/04 5:15 p.m.•16 views

UBUNTU-CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS5.8AI score0.00306EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/06/04 4:32 p.m.•13 views

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS5AI score0.00306EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/04 4:32 p.m.•66 views

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS0.00306EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/06/04 4:32 p.m.•28 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.8AI score0.00306EPSS
SaveExploits0
OSV
OSV
•added 2025/06/04 4:32 p.m.•11 views

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score
SaveExploits0References8
CVE
CVE
•added 2025/06/04 4:32 p.m.•244 views

CVE-2025-2336

CVE-2025-2336 concerns AngularJS ngSanitize: an improper sanitization flaw allows bypassing image source restrictions via the href and xlink:href attributes in SVG elements. The root cause is inadequate sanitization, which can lead to Content Spoofing and potentially degrade application performa...

4.8CVSS6.7AI score0.00306EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/04 12:00 a.m.•0 views

CVE-2025-2336: Incomplete Filtering of Special Elements

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in ' ' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.8AI score0.00306EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/04 12:00 a.m.•11 views

PT-2025-23829

Name of the Vulnerable Software and Affected Versions AngularJS versions 1.3.1 and later Description The issue is related to improper sanitization of the href and xlink:href attributes in SVG elements in the ngSanitize module. This allows attackers to bypass common image source restrictions,...

4.8CVSS6.9AI score0.00306EPSS
SaveExploits0References28
CNNVD
CNNVD
•added 2025/06/04 12:00 a.m.•13 views

AngularJS 安全漏洞

AngularJS is a TypeScript-based open source web application framework from AngularJS Open Source. A security vulnerability exists in AngularJS 1.3.1 and later versions, which stems from improper cleanup of SVG element attributes in the ngSanitize module, which could lead to content spoofing and...

4.8CVSS6.2AI score0.00306EPSS
SaveExploits0References3
Rows per page
Query Builder