Lucene search
K

1353 matches found

vulnersOsv
vulnersOsv
added 2022/10/14 12:0 p.m.0 views

@chinchilla-software/angular-tooltip (=1.2.1), @creatartis/creatartis-grunt (>=0.0.16-alpha <=0.0.16-beta) +83 more potentially affected by CVE-2022-37602 via grunt-karma (>=0.10.1 <=3.0.2)

grunt-karma NPM version =0.10.1, =0.0.16-alpha, =6.0.0, =2.0.9, =4.8.13, =5.1.4, =1.0.0, =3.3.15, =2.6.0, =0.1.7, =0.0.1, =0.0.1, =1.0.0 - @sap/grunt-sapui5-bestpractice-build =1.3.52 and more Source cves: CVE-2022-37602 Source advisory: OSV:GHSA-HCJ4-XF6X-63WJ...

9.8CVSS7.2AI score0.00864EPSS
Exploits1
Snyk
Snyk
added 2022/10/11 8:18 a.m.1 views

Malicious Package

Overview todomvc-angular-tests is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2022/09/14 12:3 p.m.1 views

Malicious Package

Overview angular-remove-diacritics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2022/09/08 11:24 a.m.1 views

Malicious Package

Overview zohocomponents-angular is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
Exploits0References3
OSV
OSV
added 2022/08/22 6:23 a.m.10 views

MAL-2022-3209 Malicious code in freekws-devportal-api-client-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 964e73152194b8926217ca3e0d90526fe2a0e1223ef4b99a45ebd367193ce1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Veracode
Veracode
added 2022/07/19 6:46 a.m.579 views

Cross-site Scripting (XSS)

angular is vulnerable to cross-site scriptingXSS attacks. The library permits interpolation of elements due to insecure page caching, allowing an attacker to inject and execute malicious javascript on the victim's browser. This vulnerability only affects Internet Explorer...

6.1CVSS6.2AI score0.04265EPSS
Exploits1References2Affected Software2
vulnersOsv
vulnersOsv
added 2022/07/16 12:0 a.m.1 views

10.30.npm-learning (>=1.0.0 <=1.1.0), 2017_node (=1.0.0) +3309 more potentially affected by CVE-2022-25869 via angular (>=0.0.1 <=1.8.3)

angular NPM version =0.0.1, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25869 Source advisory: OSV:GHSA-PRC3-VJFX-VHM9...

6.1CVSS6.8AI score0.04265EPSS
Exploits1
OSV
OSV
added 2022/07/16 12:0 a.m.2 views

GHSA-PRC3-VJFX-VHM9 Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

6.1CVSS7.1AI score0.04265EPSS
Exploits1References14
Github Security Blog
Github Security Blog
added 2022/07/16 12:0 a.m.573 views

Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

6.1CVSS5.9AI score0.04265EPSS
Exploits1References14Affected Software1
OSV
OSV
added 2022/07/15 8:15 p.m.9 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS5.7AI score0.04265EPSS
Exploits1References12
NVD
NVD
added 2022/07/15 8:15 p.m.18 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS0.04265EPSS
Exploits1References12
OSV
OSV
added 2022/07/15 8:15 p.m.1 views

DEBIAN-CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.6AI score0.04265EPSS
Exploits1References1
Prion
Prion
added 2022/07/15 8:15 p.m.31 views

Cross site scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

5.8CVSS5.8AI score0.04265EPSS
Exploits1References5
OSV
OSV
added 2022/07/15 8:15 p.m.2 views

UBUNTU-CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.8AI score0.04265EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/07/15 8:2 p.m.21 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

4.2CVSS6AI score0.04265EPSS
Exploits1References7
CVE
CVE
added 2022/07/15 8:2 p.m.255 views

CVE-2022-25869

CVE-2022-25869 affects multiple Angular/AngularJS packages with an XSS through insecure IE page caching that allows textarea interpolation. Connected IBM advisory confirms impact on IBM Storage Copy Data Management: affected versions 2.2.0.0–2.2.26.0, with a fix available in 2.2.27.0 for Linux pl...

6.1CVSS5.8AI score0.04265EPSS
Exploits1References12Affected Software1
Debian CVE
Debian CVE
added 2022/07/15 8:2 p.m.73 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.6AI score0.04265EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2022/07/15 8:0 p.m.0 views

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements...

6.1CVSS6.8AI score0.04265EPSS
Exploits1References13
CNNVD
CNNVD
added 2022/07/15 12:0 a.m.0 views

Angular 跨站脚本漏洞

Angular is a development platform. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. A cross-site scripting vulnerability exists in Angular, which stems from an insecure page cache in Internet Explorer that allows the insertion of textarea...

6.1CVSS6.5AI score0.04265EPSS
Exploits1References14
Positive Technologies
Positive Technologies
added 2022/07/15 12:0 a.m.3 views

PT-2022-6869 · Microsoft +1 · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: angular versions prior to the fixed version Description: The issue is related to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, allowing interpolation of elements. This occurs because the application...

6.4CVSS7.5AI score0.04265EPSS
Exploits1References31
Rows per page
Query Builder