Lucene search
+L

21 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/17 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-101897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, th...

5.1CVSS6.2AI score0.00353EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/14 4:17 p.m.•9 views

DEBIAN-CVE-2026-101897

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/14 4:17 p.m.•10 views

CVE-2026-101897

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS0.00353EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/14 3:03 p.m.•5 views

CVE-2026-101897 Angular DevTools (Local DoS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/10/14 3:03 p.m.•14 views

CVE-2026-101897

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/10/14 3:03 p.m.•43 views

CVE-2026-101897 Angular DevTools (Local DoS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS0.00353EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/14 3:03 p.m.•13 views

EUVD-2026-101143

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/14 3:03 p.m.•33 views

CVE-2026-101897 Angular DevTools (Local DoS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score
SaveExploits0References7
Mend
Mend
•added 2026/10/14 3:03 p.m.•17 views

CVE-2026-101897

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

6.9CVSS6.1AI score0.00353EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/14 3:03 p.m.•36 views

CVE-2026-101897

The Angular DevTools browser extension (versions 1.20.0 until 1.21.1 ) is vulnerable to a local Denial of Service (DoS) . The background service worker fails to adequately verify the source of chrome.runtime.sendMessage messages, allowing untrusted web pages or third-party content scripts to send...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•19 views

PT-2026-113788

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•10 views

CVE-2026-101897: Origin Validation Error

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

5.1CVSS6.1AI score0.00353EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-7938

Malware in sbrugna...

7.4CVSS8AI score0.01044EPSS
SaveExploits0References7
CVE
CVE
•added 2019/01/09 7:00 p.m.•175 views

CVE-2018-6139

CVE-2018-6139 affects Google Chrome/Chromium’s debugger extension API in DevTools, before 67.0.3396.62. An attacker convincing a user to install a malicious extension could bypass restrictions and execute arbitrary code. Public exploits exist. Remediation: upgrade to 67.0.3396.62 or newer. Affect...

8.8CVSS6.5AI score0.01916EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2019/01/09 7:00 p.m.•43 views

CVE-2018-6139

Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

6.6AI score0.01916EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/09 12:00 a.m.•10 views

CVE-2018-6139: Improper Input Validation

Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

8.8CVSS6.5AI score0.01916EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/09 12:00 a.m.•10 views

CVE-2018-6140: Improper Input Validation

Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

9.3CVSS6.5AI score0.02644EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/09 12:00 a.m.•10 views

CVE-2018-16081: Missing Authorization

Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension...

7.4CVSS8AI score0.01044EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/09/04 12:00 a.m.•9 views

PT-2018-3200

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 69.0.3497.81 Description The issue is related to the chrome.debugger API in DevTools, which allowed an attacker to access local files without permission by convincing a user to install a malicious extension. Thi...

7.8CVSS0.01044EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/05/29 12:00 a.m.•6 views

PT-2018-3252

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 67.0.3396.62 Description The issue is related to insufficient input validation in the chrome.debugger API DevTools of Google Chrome, allowing a remote attacker to convince a user to install a malicious extension...

9.3CVSS0.01916EPSS
SaveExploits0
Rows per page
Query Builder