Lucene search
+L

17 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/17 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-101897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, th...

5.1CVSS6.2AI score0.00353EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/14 4:17 p.m.•10 views

DEBIAN-CVE-2026-101897

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/14 3:03 p.m.•5 views

CVE-2026-101897 Angular DevTools (Local DoS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/14 3:03 p.m.•43 views

CVE-2026-101897 Angular DevTools (Local DoS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS0.00353EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/10/14 3:03 p.m.•14 views

CVE-2026-101897

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0
EUVD
EUVD
•added 2026/10/14 3:03 p.m.•13 views

EUVD-2026-101143

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/14 3:03 p.m.•33 views

CVE-2026-101897 Angular DevTools (Local DoS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score
SaveExploits0References7
Mend
Mend
•added 2026/10/14 3:03 p.m.•17 views

CVE-2026-101897

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

6.9CVSS6.1AI score0.00353EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/14 3:03 p.m.•38 views

CVE-2026-101897

The Angular DevTools browser extension (versions 1.20.0 until 1.21.1 ) is vulnerable to a local Denial of Service (DoS) . The background service worker fails to adequately verify the source of chrome.runtime.sendMessage messages, allowing untrusted web pages or third-party content scripts to send...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•19 views

PT-2026-113788

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•10 views

CVE-2026-101897: Origin Validation Error

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/31 5:17 p.m.•27 views

CVE-2026-82810

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

4.8CVSS0.00147EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/31 4:45 p.m.•50 views

CVE-2026-82810

extension.vn 2FA Authenticator Extension 1.0.0.2 for Chrome contains an information disclosure vulnerability in the Background Service Worker component. The unrestricted chrome.runtime.onMessageExternal.addListener handler allows an attacker with local access and low privileges to manipulate the ...

4.8CVSS5.1AI score0.00147EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/31 4:45 p.m.•21 views

CVE-2026-82810 extension.vn 2FA Authenticator Extension Background Service Worker chrome.runtime.onMessageExternal.addListener information disclosure

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

4.8CVSS5.1AI score0.00147EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/31 4:45 p.m.•20 views

EUVD-2026-68657

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

4.8CVSS5.6AI score0.00147EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•7 views

CVE-2026-82810: Exposure of Sensitive Information to an Unauthorized Actor

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

4.8CVSS4.9AI score0.00147EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•29 views

PT-2026-83902

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

4.8CVSS5.6AI score0.00147EPSS
SaveExploits0References6
Rows per page
Query Builder