Lucene search
+L

26059 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/09 7:24 a.m.6 views

Malicious code in iotex-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2beba21703d9c694e1628b3b060a8950b6a7b55b45999d4f553dfa80a78f08c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/08/09 7:24 a.m.12 views

MAL-2022-3946 Malicious code in iotex-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2beba21703d9c694e1628b3b060a8950b6a7b55b45999d4f553dfa80a78f08c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/07/28 12:00 a.m.9 views

PT-2022-17404 · Opc · Opc Labs Quickopc

Name of the Vulnerable Software and Affected Versions: OPC Labs QuickOPC version 2022.1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

7.8CVSS7.4AI score0.00852EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
added 2022/07/21 12:00 a.m.10 views

July 21, 2022—KB5015882 (OS Build 22000.832) Preview

None None...

6.1AI score
SaveExploits0
Veracode
Veracode
added 2022/07/19 6:46 a.m.605 views

Cross-site Scripting (XSS)

angular is vulnerable to cross-site scriptingXSS attacks. The library permits interpolation of elements due to insecure page caching, allowing an attacker to inject and execute malicious javascript on the victim's browser. This vulnerability only affects Internet Explorer...

6.1CVSS6.2AI score0.06817EPSS
SaveExploits1References2Affected Software2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/18 1:58 p.m.8 views

Malicious code in sgn-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b77ef9e4111690ff33a0b7319033c3b00d2fc28ff477a609ca1f2b739091fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Snyk
Snyk
added 2022/07/17 8:08 a.m.5 views

Malicious Package

Overview sgn-explorer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
OSV
OSV
added 2022/07/16 12:00 a.m.17 views

GHSA-PRC3-VJFX-VHM9 Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

6.1CVSS7.1AI score0.06817EPSS
SaveExploits1References14
Github Security Blog
Github Security Blog
added 2022/07/16 12:00 a.m.591 views

Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

6.1CVSS5.9AI score0.06817EPSS
SaveExploits1References14Affected Software1
OSV
OSV
added 2022/07/15 8:15 p.m.14 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS5.7AI score
SaveExploits0References12
NVD
NVD
added 2022/07/15 8:15 p.m.23 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS0.06817EPSS
SaveExploits1References12
OSV
OSV
added 2022/07/15 8:15 p.m.5 views

DEBIAN-CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.6AI score0.06817EPSS
SaveExploits1References1
Prion
Prion
added 2022/07/15 8:15 p.m.35 views

Cross site scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

5.8CVSS5.8AI score0.06817EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2022/07/15 8:15 p.m.56 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.8AI score0.06817EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/15 8:15 p.m.15 views

UBUNTU-CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.8AI score0.06817EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/07/15 8:02 p.m.37 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

4.2CVSS6AI score0.06817EPSS
SaveExploits1References7
CVE
CVE
added 2022/07/15 8:02 p.m.278 views

CVE-2022-25869

CVE-2022-25869 affects multiple Angular/AngularJS packages with an XSS through insecure IE page caching that allows textarea interpolation. Connected IBM advisory confirms impact on IBM Storage Copy Data Management: affected versions 2.2.0.0–2.2.26.0, with a fix available in 2.2.27.0 for Linux pl...

6.1CVSS5.8AI score0.06817EPSS
SaveExploits1References12Affected Software1
Debian CVE
Debian CVE
added 2022/07/15 8:02 p.m.79 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.6AI score0.06817EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2022/07/15 8:00 p.m.5 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.8AI score0.06817EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2022/07/15 12:00 a.m.5 views

Angular 跨站脚本漏洞

Angular is a development platform. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. A cross-site scripting vulnerability exists in Angular, which stems from an insecure page cache in Internet Explorer that allows the insertion of textarea...

6.1CVSS6.5AI score0.06817EPSS
SaveExploits1References14
Rows per page
Query Builder