Astra Linux – Vulnerability in Chromium

The use of after-free in WebRTC in Google Chrome before version 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Firefox

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 108. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects versio...

Astra Linux – Vulnerability in Firefox

A duplicate SystemPrincipal object can be created when parsing a non-system HTML document using DOMParser::ParseFromSafeString. This could result in bypassing web security checks. This vulnerability affects Firefox versions earlier than 109...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 109. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 110...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Type Confusion in the ServiceWorker API of Google Chrome prior to version 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Network Service of Google Chrome prior to version 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page and specific interactions. Chromium security severity: High...

Astra Linux – Vulnerability in Firefox

When dragging and dropping an image across origins, the size of the image may be leaked. This behavior was present in version 109 and caused web compatibility issues, as well as this security concern. Therefore, this behavior was disabled until further review. This vulnerability affects Firefox...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-002121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002121 advisory. When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2026-109 (ALASDOCKER-2026-109)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-109 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

MiracleLinux 4 : 389-ds-base-1.2.11.15-32.AXS4 (AXSA:2014-109:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-109:02 advisory. 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration. Security...

Malicious code in elf-stats-sleighing-mailbag-109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806052778d7970e94c40824de58ddfca3790e62ea9587441287268b8aff307d7 The package elf-stats-sleighing-mailbag-109 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201033

Malicious code in elf-stats-sleighing-mailbag-109 npm...

MAL-2025-192252 Malicious code in elf-stats-sleighing-mailbag-109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806052778d7970e94c40824de58ddfca3790e62ea9587441287268b8aff307d7 The package elf-stats-sleighing-mailbag-109 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-200949

Malicious code in elf-stats-caroling-toy-109 npm...

Malicious code in elf-stats-caroling-toy-109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fff52bb6f322020f179d6ddaf8ae6277ef06c64dbb9d2e2aa506aa5b8c5c45f The package elf-stats-caroling-toy-109 was found to contain malicious code...

MAL-2025-192002 Malicious code in elf-stats-caroling-toy-109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fff52bb6f322020f179d6ddaf8ae6277ef06c64dbb9d2e2aa506aa5b8c5c45f The package elf-stats-caroling-toy-109 was found to contain malicious code...

Malicious code in riyanto-109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2a6ed258a3a1e276f517fc5acfd6099bc80214521cd6179e7f972c7fdb345a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165093 Malicious code in riyanto-109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2a6ed258a3a1e276f517fc5acfd6099bc80214521cd6179e7f972c7fdb345a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Adobe Illustrator < 29.8.3 / 29.0.0 < 29.8.3 Multiple Arbitrary code execution (APSB25-109)

The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-109 advisory. - Illustrator versions 28.7.10, 29.8.2 and earlier are affected by an out-of-bounds write vulnerability that...