Lucene search
+L

29833 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/07/18 1:58 p.m.•16 views

Malicious code in sgn-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b77ef9e4111690ff33a0b7319033c3b00d2fc28ff477a609ca1f2b739091fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Snyk
Snyk
•added 2022/07/17 8:08 a.m.•9 views

Malicious Package

Overview sgn-explorer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/07/16 12:00 a.m.•615 views

Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

6.1CVSS5.9AI score0.0768EPSS
SaveExploits1References14Affected Software1
osv_ghsa
osv_ghsa
•added 2022/07/16 12:00 a.m.•35 views

GHSA-PRC3-VJFX-VHM9 Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

6.1CVSS7.1AI score0.0768EPSS
SaveExploits1References14
NVD
NVD
•added 2022/07/15 8:15 p.m.•27 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS0.0768EPSS
SaveExploits1References12
osv_debian
osv_debian
•added 2022/07/15 8:15 p.m.•20 views

DEBIAN-CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.6AI score0.0768EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/07/15 8:15 p.m.•22 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS5.7AI score0.0768EPSS
SaveExploits1References12
Prion
Prion
•added 2022/07/15 8:15 p.m.•40 views

Cross site scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

5.8CVSS5.8AI score0.0768EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2022/07/15 8:15 p.m.•61 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.8AI score0.0768EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/07/15 8:15 p.m.•32 views

UBUNTU-CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.8AI score0.0768EPSS
SaveExploits1References3
CVE
CVE
•added 2022/07/15 8:02 p.m.•295 views

CVE-2022-25869

CVE-2022-25869 affects multiple Angular/AngularJS packages with an XSS through insecure IE page caching that allows textarea interpolation. Connected IBM advisory confirms impact on IBM Storage Copy Data Management: affected versions 2.2.0.0–2.2.26.0, with a fix available in 2.2.27.0 for Linux pl...

6.1CVSS5.8AI score0.0768EPSS
SaveExploits1References12Affected Software1
Mend
Mend
•added 2022/07/15 8:02 p.m.•5 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS0.0768EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/07/15 8:02 p.m.•47 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

4.2CVSS6AI score0.0768EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2022/07/15 8:02 p.m.•96 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.6AI score0.0768EPSS
SaveExploits1
attackerkb
attackerkb
•added 2022/07/15 8:00 p.m.•10 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.8AI score0.0768EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2022/07/15 12:00 a.m.•20 views

PT-2022-6869 · Microsoft +1 · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: angular versions prior to the fixed version Description: The issue is related to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, allowing interpolation of elements. This occurs because the application...

6.4CVSS7.5AI score0.0768EPSS
SaveExploits1References31
CNNVD
CNNVD
•added 2022/07/15 12:00 a.m.•12 views

Angular cross-site scripting vulnerabilities

Angular is a development platform. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. A cross-site scripting vulnerability exists in Angular, which stems from an insecure page cache in Internet Explorer that allows the insertion of textarea...

6.1CVSS6.5AI score0.0768EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/15 12:00 a.m.•8 views

CVE-2022-25869: Improper Neutralization of Input During Web Page Generation

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.7AI score0.0768EPSS
SaveExploits1References3
Snyk
Snyk
•added 2022/07/14 1:57 p.m.•12 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicio...

6.1CVSS5.3AI score0.0768EPSS
SaveExploits1References2
Snyk
Snyk
•added 2022/07/14 1:57 p.m.•12 views

Cross-site Scripting (XSS)

Overview AngularJS.Core is an AngularJS. package for other Angular modules within .NET. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. Details Cross-site scripting ...

6.1CVSS5.3AI score0.0768EPSS
SaveExploits1References2
Rows per page
Query Builder