Angularjs (Angularjs) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 838 known versions, newest CVE from 2024-09-09. Vendor: Angularjs.
CVEs of Angularjs
- CVE-2024-8373 - CVSS 4.8 (medium), 2024-09-09: Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image source…
- CVE-2024-8372 - CVSS 4.8 (medium), 2024-09-09: Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to…
- CVE-2023-26118 - CVSS 5.3 (medium), 2023-03-30: Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> element due to the usage…
- CVE-2023-26117 - CVSS 5.3 (medium), 2023-03-30: Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an…
- CVE-2023-26116 - CVSS 5.3 (medium), 2023-03-30: Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the…
- CVE-2022-25869 - CVSS 6.1 (medium), 2022-07-15: All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting…
- CVE-2021-4231 - CVSS 5.4 (medium), 2022-05-26: A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation…
- CVE-2022-25844 - CVSS 7.5 (high), 2022-05-01: The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to…
- CVE-2020-7676 - CVSS 5.4 (medium), 2020-06-08: angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping…
- CVE-2019-14863 - CVSS 7.1 (high), 2020-01-02: There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers…
- CVE-2019-10768 - CVSS 7.5 (high), 2019-11-19: In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.
