RHEL 8 : gjs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json5: Prototype Pollution in JSON5 via Parse Method CVE-2022-46175 Note that Nessus has not tested for this issue...

RHEL 9 : firefox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wasm2c: DoS via crafted binary CVE-2023-31670 - Versions of the package angular from 1.2.21 are vulnerabl...

ng-srcset Component DoS

The vulnerability of the ng-srcset component in the application design and development environment for Angular is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

RHEL 9 : ceph (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - angularjs: Regular expression denial of service via the $resource service CVE-2023-26117 Note that Nessus has not...

angular-workshops.de Cross Site Scripting vulnerability OBB-3932497

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

@net7/boilerplate-arianna (>=5.6.0, <=5.6.16), myrta-ui (>=17.0.56, <=17.0.57) +1 more potentially affected by CVE-2024-4367 via ngx-extended-pdf-viewer (>=19.2.0, <=19.7.1)

ngx-extended-pdf-viewer NPM version =19.2.0, =5.6.0, =17.0.56, =18.0.0-next.0, =18.0.0-next.3 Source cves: CVE-2024-4367 Source advisory: SNYK:JS-NGXEXTENDEDPDFVIEWER-11790310...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

PT-2024-25422 · Unknown · Angular-Translate

Name of the Vulnerable Software and Affected Versions: angular-translate versions through 2.19.1 Description: The issue allows for XSS attacks via a crafted key used by the translate directive. The vendor notes that there is no documentation indicating a key is supposed to be safe against XSS...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

CVE-2024-33665: Improper Neutralization of Input During Web Page Generation

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

Angular-translate Cross-site Scripting Vulnerability

angular-translate is an AngularJS module in the angular-translate open source. A cross-site scripting vulnerability exists in Angular-translate version 2.19.1 and earlier, which stems from allowing cross-site scripting attacks via a crafted key used by the Translate command...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

Malicious code in ui-common-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...

@angular-devkit/build-angular (>=17.1.0-next.1, <=18.0.0-next.1), @directus/api (>=15.0.0, <=19.0.2) +42 more potentially affected by CVE-2024-30260 via undici (>=6.0.0, <=6.10.2)

undici NPM version =6.0.0, =17.1.0-next.1, =15.0.0, =10.0.15, =1.0.7, =2.0.3-dev.1707221040-ae57d7fac, =2.3.0-dev.1707221040-ae57d7fac, =9.0.0-next.34, =17.2.4-snapshot-1710342685688, =17.2.4-snapshot-1710342685688, =0.0.0-nightly-20240325-3d2380c, =1.0.0, =1.0.0, =15.0.0-dev.1711510274-f1f69dafa...

@angular-devkit/build-angular (>=17.1.0-next.1, <=18.0.0-next.1), @directus/api (>=15.0.0, <=19.0.2) +42 more potentially affected by CVE-2024-30260 via undici (>=6.0.0, <=6.10.2)

undici NPM version =6.0.0, =17.1.0-next.1, =15.0.0, =10.0.15, =1.0.7, =2.0.3-dev.1707221040-ae57d7fac, =2.3.0-dev.1707221040-ae57d7fac, =9.0.0-next.34, =17.2.4-snapshot-1710342685688, =17.2.4-snapshot-1710342685688, =0.0.0-nightly-20240325-3d2380c, =1.0.0, =1.0.0, =15.0.0-dev.1711510274-f1f69dafa...

@angular-devkit/build-angular (>=17.3.0-rc.0, <=17.3.3), @bebasebuild/basebuild (>=2.0.0-beta.0, <=2.0.0-beta.2) +56 more potentially affected by CVE-2024-31207 via vite (>=5.1.0, <=5.1.6)

vite NPM version =5.1.0, =17.3.0-rc.0, =2.0.0-beta.0, =1.0.8, =17.3.0-snapshot-1710756594967, =17.3.0-snapshot-1710756594967, =0.0.0-52469075, =0.0.0-52469075, =0.0.0-52469075, =6.0.12, =6.0.13, =6.0.13, =6.0.13, =6.0.13, =6.0.25 and more Source cves: CVE-2024-31207 Source advisory:...

@angular-devkit/build-angular (18.0.0-next.0), @eui/deps-base (>=18.0.0-next.1, <=18.0.0-next.2) +10 more potentially affected by CVE-2024-31207 via vite (>=5.2.0, <=5.2.4)

vite NPM version =5.2.0, =18.0.0-next.1, =18.0.0-next.1, =1.0.2, =0.0.39, =1.1.3, =1.1.9, =0.1.3, =0.20.0-beta.3, =0.20.0 Source cves: CVE-2024-31207 Source advisory: GHSA-8JHW-289H-JH2G...

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression backtracking in the ng-srcset directive. This potentially leads to Regular Expression Denial of Service ReDoS...

SUSE CVE-2024-21490

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...