AN
Vendor
Angularjs
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-8373 | AN Angularjs Angularjs | 4.3 | Sep 9 | AngularJS improper sanitization in '<source>' element |
| CVE-2024-8372 | AN Angularjs Angularjs | 4.3 | Sep 9 | AngularJS improper sanitization in 'srcset' attribute |
| CVE-2024-21490 | AN Angular.js Angularjs | 7.5 | Feb 10 | This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0 |
| CVE-2023-26118 | AN Angularjs Angularjs | 5.3 | Mar 30 | Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> element due to the usage of an insecure… |
| CVE-2023-26117 | AN Angularjs Angularjs | 5.3 | Mar 30 | Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular… |
| CVE-2023-26116 | AN Angularjs Angularjs | 5.3 | Mar 30 | Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure… |
| CVE-2022-25869 | AN Angularjs Angularjs | 6.1 | Jul 15 | All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure… |
| CVE-2021-4231 | AN Angularjs Angularjs | 5.4 | May 26 | A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2 |
| CVE-2022-25844 | AN Angularjs Angularjs | 7.5 | May 1 | The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in… |
| CVE-2020-7676 | AN Angularjs Angularjs | 5.4 | Jun 8 | angular.js prior to 1.8.0 allows cross site scripting |
| CVE-2019-14863 | AN Angularjs Angularjs | 6.1 | Jan 2 | There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along… |
| CVE-2019-10768 | AN Angularjs Angularjs | 7.5 | Nov 19 | In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload |