Skip to content
OpenAdvisories

Archive

13 June 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 2.2

    Exposure of Resource to Wrong Sphere in Electron

    Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerability in versions prior to 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 allows a renderer with JS execution to obtain access to a new renderer…

  • Low 2.8

    Heap-based Buffer Overflow in hpjansson/chafa

    Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.

  • Low 3.5

    Information disclosure in the External Interface

    A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances.

  • Low 3.5

    OTRS version number is always in the exported ICS files

    When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number.