Lucene search
K

1344 matches found

Tenable Nessus
Tenable Nessus
added 2023/01/23 12:0 a.m.28 views

RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-XStatic-Angular) (RHSA-2022:8866)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8866 advisory. Angular JavaScript library packaged for setuptools easyinstall / pip. Security Fixes: Prototype pollution in merge function could result in code...

7.5CVSS7.2AI score0.00411EPSS
Exploits1References5
NVD
NVD
added 2023/01/09 9:15 p.m.6 views

CVE-2015-10035

A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addTest of the file rest-server/data-server.js. The manipulation leads to sql injection. The patch is named a29d8ae121b46ebfa96a55a9106466ab2ef166ae. It is...

9.8CVSS7AI score0.00297EPSS
Exploits0References3
Prion
Prion
added 2023/01/09 9:15 p.m.16 views

Sql injection

A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addTest of the file rest-server/data-server.js. The manipulation leads to sql injection. The patch is named a29d8ae121b46ebfa96a55a9106466ab2ef166ae. It is...

7.5CVSS8AI score0.00297EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/09 8:43 p.m.7 views

CVE-2015-10035 gperson angular-test-reporter data-server.js addTest sql injection

A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addTest of the file rest-server/data-server.js. The manipulation leads to sql injection. The patch is named a29d8ae121b46ebfa96a55a9106466ab2ef166ae. It is...

5.5CVSS7.5AI score0.00297EPSS
Exploits0References3
CVE
CVE
added 2023/01/09 8:43 p.m.63 views

CVE-2015-10035

CVE-2015-10035 affects gperson angular-test-reporter in the rest-server/data-server.js file, specifically the getProjectTables/addTest function. The issue enables SQL injection due to how input is handled in that code path. The patch to fix this vulnerability is identified by the commit hash a29d...

9.8CVSS7AI score0.00297EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/09 8:43 p.m.10 views

CVE-2015-10035 gperson angular-test-reporter data-server.js addTest sql injection

A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addTest of the file rest-server/data-server.js. The manipulation leads to sql injection. The patch is named a29d8ae121b46ebfa96a55a9106466ab2ef166ae. It is...

5.5CVSS9.9AI score0.00297EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/01/09 12:0 a.m.1 views

angular-test-reporter SQL注入漏洞

angular-test-reporter is an application for publishing and viewing automated test results by Grant Person Personal Developer. A SQL injection vulnerability exists in angular-test-reporter that originates in the function getProjectTables/addTest in the file rest-server/data-server.js, which operat...

9.8CVSS6.6AI score0.00297EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/09 12:0 a.m.1 views

PT-2023-10214 · Unknown · Gperson Angular-Test-Reporter

Name of the Vulnerable Software and Affected Versions: gperson angular-test-reporter affected versions not specified Description: A critical issue was found in gperson angular-test-reporter, affecting the function getProjectTables/addTest of the file rest-server/data-server.js. This issue leads t...

9.8CVSS6.2AI score0.00297EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/12/07 8:28 p.m.37 views

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-XStatic-Angular) security update

An update for python-XStatic-Angular is now available for Red Hat OpenStack Platform 16.1.9 Train for Red Hat Enterprise Linux RHEL 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

7.5CVSS6.9AI score0.00411EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2022/12/07 7:19 p.m.37 views

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (python-XStatic-Angular) security update

An update for python-XStatic-Angular is now available for Red Hat OpenStack Platform 16.2.4 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

7.5CVSS6.9AI score0.00411EPSS
Exploits1References2
vulnersOsv
vulnersOsv
added 2022/10/14 7:0 p.m.2 views

@alfresco/adf-testing (=6.0.0-A.2-8258), @angular-architects/build-angular (=14.2.0-next.0) +54 more potentially affected by CVE-2022-37603 via loader-utils (>=3.0.0 <=3.2.0)

loader-utils NPM version =3.0.0, =0.9.2, =13.0.0, =1.0.0, =1.3.1, =13.0.0-rc.18, =3.9.0, =13.0.0, =0.1.0, =1.7.4, =4.7.1-beta.0, =4.7.1-beta.0, =9.1.3-beta.1 and more Source cves: CVE-2022-37603 Source advisory: OSV:GHSA-3RFM-JHWJ-7488...

7.5CVSS6.8AI score0.01331EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2022/10/14 12:0 p.m.0 views

@chinchilla-software/angular-tooltip (=1.2.1), @creatartis/creatartis-grunt (>=0.0.16-alpha <=0.0.16-beta) +83 more potentially affected by CVE-2022-37602 via grunt-karma (>=0.10.1 <=3.0.2)

grunt-karma NPM version =0.10.1, =0.0.16-alpha, =6.0.0, =2.0.9, =4.8.13, =5.1.4, =1.0.0, =3.3.15, =2.6.0, =0.1.7, =0.0.1, =0.0.1, =1.0.0 - @sap/grunt-sapui5-bestpractice-build =1.3.52 and more Source cves: CVE-2022-37602 Source advisory: OSV:GHSA-HCJ4-XF6X-63WJ...

9.8CVSS7.2AI score0.00864EPSS
Exploits1
Snyk
Snyk
added 2022/10/11 8:18 a.m.1 views

Malicious Package

Overview todomvc-angular-tests is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2022/09/14 12:3 p.m.1 views

Malicious Package

Overview angular-remove-diacritics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2022/09/08 11:24 a.m.1 views

Malicious Package

Overview zohocomponents-angular is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
Exploits0References3
OSV
OSV
added 2022/08/22 6:23 a.m.9 views

MAL-2022-3209 Malicious code in freekws-devportal-api-client-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 964e73152194b8926217ca3e0d90526fe2a0e1223ef4b99a45ebd367193ce1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Veracode
Veracode
added 2022/07/19 6:46 a.m.579 views

Cross-site Scripting (XSS)

angular is vulnerable to cross-site scriptingXSS attacks. The library permits interpolation of elements due to insecure page caching, allowing an attacker to inject and execute malicious javascript on the victim's browser. This vulnerability only affects Internet Explorer...

6.1CVSS6.2AI score0.04265EPSS
Exploits1References2Affected Software2
vulnersOsv
vulnersOsv
added 2022/07/16 12:0 a.m.1 views

10.30.npm-learning (>=1.0.0 <=1.1.0), 2017_node (=1.0.0) +3309 more potentially affected by CVE-2022-25869 via angular (>=0.0.1 <=1.8.3)

angular NPM version =0.0.1, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25869 Source advisory: OSV:GHSA-PRC3-VJFX-VHM9...

6.1CVSS6.8AI score0.04265EPSS
Exploits1
OSV
OSV
added 2022/07/16 12:0 a.m.1 views

GHSA-PRC3-VJFX-VHM9 Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

6.1CVSS7.1AI score0.04265EPSS
Exploits1References14
Github Security Blog
Github Security Blog
added 2022/07/16 12:0 a.m.572 views

Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

6.1CVSS5.9AI score0.04265EPSS
Exploits1References14Affected Software1
Rows per page
Query Builder