Lucene search
+L

336 matches found

CNNVD
CNNVD
added 2025/08/19 12:0 a.m.5 views

AngularJS 安全漏洞

AngularJS is a TypeScript-based open source web application framework from AngularJS Open Source. A security vulnerability exists in AngularJS that stems from a backtracking issue with regular expressions used by linky filters, which could lead to a regular expression denial of service attack...

4.3CVSS6.6AI score0.00204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.10 views

PT-2025-33727 · Google · Angularjs

Name of the Vulnerable Software and Affected Versions: AngularJS affected versions not specified Description: A regular expression used by the AngularJS linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking, potentially leading to a Regular expression...

4.3CVSS6.8AI score0.00204EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-25869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting XS...

6.1CVSS6.7AI score0.06817EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-2336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass...

4.8CVSS6.3AI score0.00302EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-10768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In AngularJS before 1.7.9 the function merge could be tricked into adding or modifying properties of Object.prototype using a proto payload. CVE-2019-10768 Note...

7.5CVSS6.9AI score0.02179EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.10 views

TencentOS Server 4: grafana (TSSA-2025:0594)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0594 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

6.1CVSS6.6AI score0.06817EPSS
SaveExploits4References6
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-14537 Malicious code in angularjs-in-view (npm)

The package angularjs-in-view was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in angularjs-in-view (npm)

The package angularjs-in-view was found to contain malicious code...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-8372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a...

4.8CVSS6.3AI score0.00574EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-8373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can...

4.8CVSS6.2AI score0.00599EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/06/06 5:21 p.m.7 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00302EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/06/04 6:30 p.m.3 views

Incomplete Filtering of Special Elements

Overview org.webjars.bower:angular-sanitize is an AngularJS module for sanitizing HTML Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements through the ngSanitize module. An attacker can manipulate image sources and perform content spoofing by injecting...

6.3CVSS6.7AI score0.00302EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/04 6:30 p.m.6 views

GHSA-4P4W-6HG8-63WX AngularJS Incomplete Filtering of Special Elements vulnerability

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00302EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/06/04 6:30 p.m.15 views

AngularJS Incomplete Filtering of Special Elements vulnerability

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.9AI score0.00302EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/06/04 5:15 p.m.2 views

DEBIAN-CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS6.8AI score0.00302EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/04 5:15 p.m.19 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS0.00302EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2025/06/04 5:15 p.m.7 views

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS7AI score0.00302EPSS
SaveExploits0References5
OSV
OSV
added 2025/06/04 5:15 p.m.6 views

UBUNTU-CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS5.8AI score0.00302EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/06/04 4:32 p.m.10 views

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS5AI score0.00302EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/04 4:32 p.m.50 views

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

4.8CVSS0.00302EPSS
SaveExploits0References2
Rows per page
Query Builder