Lucene search
K

5 matches found

NVD
NVD
added 2026/06/22 6:16 p.m.8 views

CVE-2026-50171

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a Denial of Service DoS vulnerability exists in the @angular/common package of Angular. The formatNumber functio...

8.2CVSS0.00161EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/22 3:49 p.m.31 views

CVE-2026-50171 Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a Denial of Service DoS vulnerability exists in the @angular/common package of Angular. The formatNumber functio...

8.2CVSS0.00161EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/06/28 12:0 a.m.4 views

The vulnerability of the software for processing, transforming, and generating documents using Ghostscript exists due to the lack of measures taken to eliminate the special elements used in the operating system command. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists because measures are not taken to eliminate the special elements used in the operating system command. Exploiting this vulnerability allows an attacker to execute arbitrary code by using th...

8.4CVSS7.9AI score0.03236EPSS
Exploits3References7Affected Software3
OSV
OSV
added 2023/06/25 10:15 p.m.5 views

UBUNTU-CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

7.8CVSS7.1AI score0.03236EPSS
Exploits3References3
Positive Technologies
Positive Technologies
added 2023/06/25 12:0 a.m.3 views

PT-2023-3318

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions 10.01.2 and earlier Description The issue arises from mishandled permission validation for pipe devices, specifically those with the %pipe% prefix or the | pipe character prefix. This can lead to command injection,...

8.4CVSS8.2AI score0.03236EPSS
Exploits3References94
Rows per page
Query Builder