389 matches found
CVE-2022-27665: Improper Neutralization of Input During Web Page Generation
Reflected XSS via AngularJS sandbox escape expressions exists in Progress Ipswitch WSFTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add fold...
CVE-2022-27665
Reflected XSS via AngularJS sandbox escape expressions exists in Progress Ipswitch WSFTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add fold...
CVE-2022-27665
Summary (CVE-2022-27665): Progress Ipswitch WS_FTP Server 8.6.0 is affected by a reflected XSS vulnerability via AngularJS sandbox escape expressions, allowing an attacker to trigger client-side code by submitting crafted input in the subdirectory search bar or Add folder filename fields. The iss...
CVE-2022-27665
Reflected XSS via AngularJS sandbox escape expressions exists in Progress Ipswitch WSFTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add fold...
CVE-2023-26116
A flaw was found in AngularJS, where it is vulnerable to a denial of service caused by a regular expression denial of service ReDoS flaw in the angular.copy utility function. By providing specially-crafted regex input, a remote attacker can cause a denial of service...
CVE-2023-26117
A flaw was found in AngularJS, where it is vulnerable to a denial of service caused by a regular expression denial of service ReDoS issue in the $resource service. By providing specially-crafted regex input, a remote attacker could cause a denial of service...
10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3309 more potentially affected by CVE-2023-26116 via angular (>=1.0.8, <=1.8.3)
angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2023-26116 Source advisory: OSV:GHSA-2VRF-HF26-JRP5...
Regular Expression Denial of Service (ReDoS)
Overview AngularJS.Core is an AngularJS. package for other Angular modules within .NET. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this...
@ardimedia/angular-portal-azure (>=0.2.2-beta, <=0.2.346), @benningfield-group/bgi (>=0.1.1, <=0.5.0) +257 more potentially affected by CVE-2023-26117 via angular-resource (>=1.3.15, <=1.8.3)
angular-resource NPM version =1.3.15, =0.2.2-beta, =0.1.1, =1.0.0, =1.0.0, =0.2.7, =1.0.0, =0.2.1, =1.0.1, =2.0.0, =1.0.0, =1.0.2, =0.1.0, =0.1.0, =3.14.2 and more Source cves: CVE-2023-26117 Source advisory: SNYK:JS-ANGULARRESOURCE-17988734...
Regular Expression Denial of Service (ReDoS)
Amendment This was deemed not a vulnerability. Overview AngularJS.Core is an AngularJS. package for other Angular modules within .NET. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...
K32412075: AngularJS XSS vulnerability CVE-2020-7676
Security Advisory Description angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code. CVE-2020-7676 Impact An attack...
aviziacomponents (1.0.1), avz-temp-components (>=1.0.1, <=1.0.6) +8 more potentially affected by CVE-2021-32854 via textangular (>=1.3.11, <=1.5.16)
textangular NPM version =1.3.11, =1.0.1, =1.1.0, =0.1.0, =1.0.1, =1.0.18, =0.0.2, =1.0.0, =1.1.2 Source cves: CVE-2021-32854 Source advisory: OSV:GHSA-7H4W-6P98-R3WX...
XSS vulnerability due to AngularJS Client-Side Template injection
...
Malicious Package
Overview ehss-angularjs-shared is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
SUSE CVE-2016-4428
Cross-site scripting XSS vulnerability in OpenStack Dashboard Horizon 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form...
SUSE CVE-2017-5246
Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in double curly-braces . This expression will be evaluated by any other authenticated user who views the...
AngularJS: Prototype pollution in merge function could result in code injection
A prototype pollution vulnerability was found in AngularJS. A remote attacker could abuse this flaw by providing malicious input to the merge function by overriding or adding properties of the Object.prototype, allowing possible injection of code...
Detection of Vulnerabilities in JavaScript Libraries
JavaScript is a popular programming language which is an integral component while developing interactive and dynamic web applications. It allows developers to create engaging and responsive user interfaces, handling complex web page elements, enhancing the overall functionality of the application...
AngularJS: Prototype pollution in merge function could result in code injection
A prototype pollution vulnerability was found in AngularJS. A remote attacker could abuse this flaw by providing malicious input to the merge function by overriding or adding properties of the Object.prototype, allowing possible injection of code...