Skip to content
OpenAdvisories

Archive

27 May 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.6

    Exposure of Sensitive Information to an Unauthorized Actor in AEgir

    In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed in 21.10.1.

  • Critical 9.3

    Kiosk Mode Breakout in Bosch Recording Station

    Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and access the underlying operating system.