PT-2022-25151 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.3 through 7.4.3.34 Liferay DXP versions 7.3 before update 10 Liferay DXP versions 7.4 before update 35 Description: The Layout module in Liferay Portal does not check user permission before showing the preview of a...

September 20, 2022-KB5017857 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H1

None None...

September 20, 2022-KB5017859 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11

None None...

September 20, 2022-KB5017858 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2

None None...

September 20, 2022-KB5017860 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2

None None...

September 20, 2022—KB5017379 (OS Build 17763.3469) Preview

None None...

September 13, 2022—KB5017315 (OS Build 17763.3406) - EXPIRED

None None...

Exchange rate may stale.

Lines of code Vulnerability details Impact While deploying rarimarkleredeemer the deployer set exchange rate in constractor and this cant be change through any function so, while calculating the preview redeem it may use a difference exchange rate between the actuall ctoken and the exchange rate ...

DRUPAL-CONTRIB-2022-054

The Next.js module provides an inline preview for content. Authenticated requests are made to Drupal to fetch JSON:API content and render them in an iframe from the decoupled Next.js site. The current implementation doesn’t sufficiently check access for fetching data. All requests made to Drupal...

CVE-2022-36048

Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. When displaying messages with embedded remote images, Zulip normally loads the image preview via a go-camo proxy server. However, an attacker who can send messages could include a crafted URL...

PT-2022-4611 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.9 through 15.1.5 GitLab CE/EE versions 15.2 through 15.2.3 GitLab CE/EE versions 15.3 through 15.3.1 Description: The issue is related to the LivePreview function in GitLab, which lacks protection of internal data. Th...

PT-2022-37222 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details indicate that the crash occurs in the Exiv2::QuickTimeVideo::previewTagDecoder and Exiv2::QuickTimeVideo::tagDecod...

August 25, 2022-KB5016594 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 11

None None...

August 23, 2022—KB5016690 (OS Build 17763.3346) Preview

None None...

macOS RawCamera Out-Of-Bounds Write Vulnerability

There is an out-of-bounds write vulnerability when decoding a certain flavor of RAW image files on macOS. The vulnerability has been confirmed on macOS 12.3.1. Although the advisory notes an attached poc, Google did not have one attached. MacOS: Out-of-bounds write in RawCamera There is an...

CVE-2022-1901

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

CVE-2022-1901

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

CVE-2022-1901

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

Code injection

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

CVE-2022-1901

CVE-2022-1901 affects Octopus Deploy. The issue allows unmasking of sensitive variables via the variable preview feature in affected versions. Public details in the provided documents are limited to the vulnerability description and a linked advisory; no explicit exploit paths, impacted versions,...