Lucene search
K

29 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-12635

Malicious code in bioql PyPI...

4.8CVSS5.1AI score0.00375EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-2837

Malicious code in bioql PyPI...

4.8CVSS6.3AI score0.00599EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-8372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a...

4.8CVSS6.3AI score0.00574EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2025/06/04 6:30 p.m.11 views

AngularJS Incomplete Filtering of Special Elements vulnerability

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.9AI score0.00354EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/06/04 5:15 p.m.2 views

DEBIAN-CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.8AI score0.00354EPSS
Exploits0References1
NVD
NVD
added 2025/06/04 5:15 p.m.16 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS0.00354EPSS
Exploits0References4
OSV
OSV
added 2025/06/04 5:15 p.m.3 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.9AI score0.00354EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/06/04 4:32 p.m.8 views

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS5AI score0.00354EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/06/04 4:32 p.m.7 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.8AI score0.00354EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/06/04 12:0 a.m.4 views

PT-2025-23829

Name of the Vulnerable Software and Affected Versions AngularJS versions 1.3.1 and later Description The issue is related to improper sanitization of the href and xlink:href attributes in SVG elements in the ngSanitize module. This allows attackers to bypass common image source restrictions,...

7.5CVSS6.9AI score0.04368EPSS
Exploits7References27
RedhatCVE
RedhatCVE
added 2025/05/22 9:49 p.m.6 views

CVE-2022-27665

Reflected XSS via AngularJS sandbox escape expressions exists in Progress Ipswitch WSFTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add fold...

6.1CVSS6.9AI score0.33112EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2025/05/19 12:0 a.m.19 views

The vulnerability of the AngularJS JavaScript framework for developing single-page applications relates to incomplete filtering of special elements, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the AngularJS JavaScript framework for developing single-page applications is related to incomplete filtering of special elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

4.8CVSS6.2AI score0.00375EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2025/05/09 3:53 a.m.10 views

Content Spoofing

AngularJS is vulnerable to Content Spoofing. The vulnerability is due to improper sanitization of the 'href' and 'xlink:href' attributes in SVG elements, which allows attackers to bypass image source restrictions...

4.8CVSS6.6AI score0.00375EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2025/04/29 4:26 p.m.85 views

CVE-2025-0716

CVE-2025-0716 is a vulnerability in AngularJS where improper sanitization of the href and xlink:href attributes in SVG elements can bypass image-source restrictions and enable Content Spoofing, potentially affecting performance due to large or slow-loading images. Affects all versions of Angular...

4.8CVSS5AI score0.00375EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/04/29 4:26 p.m.4 views

CVE-2025-0716

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and also negatively affect...

4.8CVSS6AI score0.00375EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/04/28 2:59 p.m.8 views

CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

4.8CVSS4.9AI score0.00574EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the AngularJS JavaScript framework for developing single-page applications lies in its incomplete filtering of special elements. This allows attackers to bypass existing security restrictions and perform spear-phishing attacks.

The vulnerability of the AngularJS framework for developing single-page applications is related to incomplete filtering of special elements. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and perform spear-phishing attacks...

4.8CVSS7AI score0.00599EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.4 views

The vulnerability of the AngularJS JavaScript framework for developing single-page applications stems from improper checking of input data’s security equivalence. This allows attackers to circumvent existing security restrictions and perform spear-phishing attacks.

The vulnerability of the AngularJS JavaScript framework for developing single-page applications is related to improper checking of unsafe equivalence of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary code...

4.8CVSS7.4AI score0.00574EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2024/09/09 3:15 p.m.1 views

DEBIAN-CVE-2024-8373

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

4.3CVSS6.8AI score0.00599EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/09/09 12:0 a.m.3 views

AngularJS 安全漏洞

AngularJS is a TypeScript-based open source web application framework from AngularJS Open Source. A security vulnerability exists in AngularJS that stems from mishandling the value of the srcset attribute in the source HTML element, which could allow an attacker to bypass common image source...

4.8CVSS6.2AI score0.00599EPSS
Exploits1References4
Rows per page
Query Builder