CVE-2023-34840

CVE-2023-34840 Vulnerability Explanation All versions in angular-ui-notification are vulnerable to XSS due to the library not sanitizing the input provided by the user. In order to safely use this library, sanitizing / encoding the parameters passed to this library is highly recommended, such as...

MAL-2026-13270 Malicious code in devplatform-ui-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74230ed898152bc75d702938fcac9bd53e13ff7100120b44c5944bb8226225f7 index.js unconditionally requires./compat on load, which selects a platform-specific asset path linux/darwin/win32 and downloads bytes over HTTPS fro...

MAL-2026-13171 Malicious code in dolyame-ui-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d450fda6c199002bb4eb20b3bf624e31393ae3ed30e9a36fce17507472b962 Package advertises itself as a UI notification toolkit but its main entry requires./compat.js, which on load randomly selects a destination from four...

Malicious code in dolyame-ui-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d450fda6c199002bb4eb20b3bf624e31393ae3ed30e9a36fce17507472b962 Package advertises itself as a UI notification toolkit but its main entry requires./compat.js, which on load randomly selects a destination from four...

Linux Distros Unpatched Vulnerability : CVE-2021-39908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before...

CVE-2023-34840

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

GHSA-MRCJ-5QXR-VHP2 angular-ui-notification Cross-site Scripting vulnerability

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

@copyleaks/plagiarism-report (>=1.0.0, <=1.0.13), bzz-ui (>=1.0.1, <=1.11.14) +8 more potentially affected by CVE-2023-34840 via angular-ui-notification (>=0.1.0, <=0.3.6)

angular-ui-notification NPM version =0.1.0, =1.0.0, =1.0.1, =2.8.46, =2.8.16, =1.0.0, =1.1.1, =1.0.0, =0.0.1, =0.0.6 - wservice-web 1.0.0 Source cves: CVE-2023-34840 Source advisory: GHSA-MRCJ-5QXR-VHP2...

@copyleaks/plagiarism-report (>=1.0.0, <=1.0.13), bzz-ui (>=1.0.1, <=1.11.14) +8 more potentially affected by CVE-2023-34840 via angular-ui-notification (>=0.1.0, <=0.3.6)

angular-ui-notification NPM version =0.1.0, =1.0.0, =1.0.1, =2.8.46, =2.8.16, =1.0.0, =1.1.1, =1.0.0, =0.0.1, =0.0.6 - wservice-web 1.0.0 Source cves: CVE-2023-34840 Source advisory: OSV:GHSA-MRCJ-5QXR-VHP2...

CVE-2023-34840: Improper Neutralization of Input During Web Page Generation

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-34840

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-34840

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-34840

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

angular-ui-notification Cross-site Scripting Vulnerability

angular-ui-notification is a library by Alexey Avramchik personal developer. Used to provide simple notifications, animated using Bootstrap 3 styles and css transformations. A security vulnerability exists in Angular angular-ui-notification version v0.1.0, v0.2.0, v0.3.6, which stems from a...

PT-2023-25027 · Unknown · Angular-Ui-Notification

Name of the Vulnerable Software and Affected Versions: angular-ui-notification versions 0.1.0 through 0.3.6 Description: The issue is related to a cross-site scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading ...

Rocket.Chat: TOTP 2 Factor Authentication Bypass

Summary Two Factor Authentication can be bypassed when telling the server to use CAS during login. Description The 2FA Login Handler skips validation when it finds CAS enabled. When the clients sends the option among the login request, the login proceeds without validation of a second factor. In...

Cross-site Scripting in node-red-dashboard

It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the uinotification node accepting raw HTML by default...

Cross-Site Scripting (XSS)

node-red-dashboard is vulnerable to cross-site scripting XSS. The vulnerability exists as the uinotification node accepts raw HTML code by default...

CVE-2019-10756

It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the uinotification node accepting raw HTML by default...

PT-2019-12030

Name of the Vulnerable Software and Affected Versions node-red-dashboard versions prior to 2.17.0 Description The issue allows for JavaScript injection due to the ui notification node accepting raw HTML by default. Recommendations For node-red-dashboard versions prior to 2.17.0, update to version...