129 matches found
Astra Linux – Vulnerability in Chromium
Type Confusion in the ServiceWorker API of Google Chrome prior to version 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Firefox
When dragging and dropping an image across origins, the size of the image may be leaked. This behavior was present in version 109 and caused web compatibility issues, as well as this security concern. Therefore, this behavior was disabled until further review. This vulnerability affects Firefox...
Astra Linux – Vulnerability in Firefox
A duplicate SystemPrincipal object can be created when parsing a non-system HTML document using DOMParser::ParseFromSafeString. This could result in bypassing web security checks. This vulnerability affects Firefox versions earlier than 109...
Astra Linux – Vulnerability in Chromium
The use of after-free in WebRTC in Google Chrome before version 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox
Memory safety bugs exist in Firefox 109. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 110...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Firefox
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 108. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects versio...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in the Network Service of Google Chrome prior to version 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page and specific interactions. Chromium security severity: High...
Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2026-109 (ALASDOCKER-2026-109)
The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-109 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...
MiracleLinux 4 : 389-ds-base-1.2.11.15-32.AXS4 (AXSA:2014-109:02)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-109:02 advisory. 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration. Security...
Malicious code in elf-stats-sleighing-mailbag-109 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806052778d7970e94c40824de58ddfca3790e62ea9587441287268b8aff307d7 The package elf-stats-sleighing-mailbag-109 was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-201033
Malicious code in elf-stats-sleighing-mailbag-109 npm...
MAL-2025-192252 Malicious code in elf-stats-sleighing-mailbag-109 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806052778d7970e94c40824de58ddfca3790e62ea9587441287268b8aff307d7 The package elf-stats-sleighing-mailbag-109 was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-200949
Malicious code in elf-stats-caroling-toy-109 npm...
MAL-2025-192002 Malicious code in elf-stats-caroling-toy-109 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fff52bb6f322020f179d6ddaf8ae6277ef06c64dbb9d2e2aa506aa5b8c5c45f The package elf-stats-caroling-toy-109 was found to contain malicious code...
Malicious code in elf-stats-caroling-toy-109 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fff52bb6f322020f179d6ddaf8ae6277ef06c64dbb9d2e2aa506aa5b8c5c45f The package elf-stats-caroling-toy-109 was found to contain malicious code...
Malicious code in riyanto-109 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2a6ed258a3a1e276f517fc5acfd6099bc80214521cd6179e7f972c7fdb345a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165093 Malicious code in riyanto-109 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2a6ed258a3a1e276f517fc5acfd6099bc80214521cd6179e7f972c7fdb345a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Adobe Illustrator < 29.8.3 / 29.0.0 < 29.8.3 Multiple Arbitrary code execution (APSB25-109)
The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-109 advisory. - Illustrator versions 28.7.10, 29.8.2 and earlier are affected by an out-of-bounds write vulnerability that...