33 matches found
@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.201-alpha) +48 more potentially affected by CVE-2026-54268 via @angular/common (>=21.0.0, <=21.2.16)
@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.2 and more Source cves: CVE-2026-54268 Source advisory: OSV:GHSA-48R7-HPM6-GFXM...
CVE-2025-40900
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to...
CVE-2025-40900
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to...
CVE-2025-40900 Angular template injection in Reports in Guardian/CMC before 26.1.0
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to...
CVE-2025-40900 Angular template injection in Reports in Guardian/CMC before 26.1.0
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to...
CVE-2025-40900
CVE-2025-40900 describes an Angular template injection in the Reports functionality of Guardian/CMC prior to version 26.1.0. An authenticated user with report privileges can embed an Angular template payload in a malicious report, which executes in the victim’s browser during viewing/import, pote...
CVE-2025-40900
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to...
EUVD-2025-209892
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to...
Angular template injection in Reports in Guardian/CMC before 26.1.0
Summary An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. Impact An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially...
Nozomi Networks CMC和Nozomi Networks Guardian 安全漏洞
Nozomi Networks CMC and Nozomi Networks Guardian are both products of Nozomi Networks, a company based in the United States. Nozomi Networks CMC is a network management platform. Nozomi Networks Guardian is a security software. Both Nozomi Networks CMC and Nozomi Networks Guardian have security...
@advancedco/design-system-workspace (4.0.0), @agilie/widget-template (>=1.0.2, <=1.1.6) +885 more potentially affected by CVE-2026-32635 via @angular/compiler (>=17.0.0-next.3, <=18.2.14)
@angular/compiler NPM version =17.0.0-next.3, =1.0.2, =0.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.2, =1.0.0, =0.0.55, =1.0.0, =0.1.1, =0.1.0, =0.1.0, =0.1.3 and more Source cves: CVE-2026-32635 Source advisory: OSV:GHSA-G93W-MFHG-P222...
@cocoar/scenar-cli (>=0.1.0-beta.54, <=0.1.0-beta.68), @eui/deps-base (>=21.0.0-alpha.10, <=21.0.3-snapshot-1768918434957) +2 more potentially affected by CVE-2026-22610 via @angular/core (>=21.0.0, <=21.0.6)
@angular/core NPM version =21.0.0, =0.1.0-beta.54, =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.3-snapshot-1768918434957 - zax-dashboard 1.0.14 Source cves: CVE-2026-22610 Source advisory: OSV:GHSA-JRMJ-C5CX-3CW6...
@agilie/widget-template (>=1.0.2, <=1.1.6), @aipeel/mat-currency-field (3.18.0) +360 more potentially affected by CVE-2025-66412 via @angular/compiler (>=18.0.0, <=18.2.14)
@angular/compiler NPM version =18.0.0, =1.0.2, =0.0.0, =1.0.0, =0.0.55, =1.0.0, =7.0.0, =5.0.512-alpha, =5.0.545-alpha, =4.0.468-alpha, =5.0.510-alpha and more Source cves: CVE-2025-66412 Source advisory: OSV:GHSA-V4HV-RGFQ-GP49...
EUVD-2023-30093
Malicious code in bioql PyPI...
CVE-2024-50577
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...
CVE-2023-26270
IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute...
CVE-2024-50577
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...
CVE-2024-50577
JetBrains YouTrack is affected prior to version 2024.3.47707. The CVE-2024-50577 issue is described as a stored XSS vulnerability caused by Angular template injection in Hub settings. Impact is cross-site scripting via Hub settings, with overall security values indicating confidentiality/integrit...