CVE-2024-23675: Improper Access Control

In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store KV Store improperly handles permissions for users that use the REST application programming interface API. This can potentially result in the deletion of KV Store collections...

CVE-2023-49619 Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

CVE-2023-49619 Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

CVE-2023-49619: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

Fedora: Security Advisory for python3.6 (FEDORA-2023-b245e992ea)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

jackson-datatypes-collections:GuavaDeserializerFuzzer: Security exception in jaz.Zer.reportFinding

Project: https://github.com/FasterXML/jackson-datatypes-collections.git Detailed Report: https://oss-fuzz.com/testcase?key=6656734344904704 Project: jackson-datatypes-collections Fuzzing Engine: libFuzzer Fuzz Target: GuavaDeserializerFuzzer Job Type: libfuzzerasanjackson-datatypes-collections...

snakeyaml: Denial of Service due to missing nested depth limitation for collections

A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service DoS due to missing nested depth limitation for collections...

Porch-Pirate - The Most Comprehensive Postman Recon / OSINT Client And Framework That Facilitates The Automated Discovery And Exploitation Of API Endpoints And Secrets Committed To Workspaces, Collections, Requests, Users And Teams

Porch Pirate started as a tool to quickly uncover Postman secrets, and has slowly begun to evolve into a multi-purpose reconaissance / OSINT framework for Postman. While existing tools are great proof of concepts, they only attempt to identify very specific keywords as "secrets", and in very...

jackson-datatypes-collections:GuavaSerializerFuzzer: Security exception in java.base/java.util.Arrays.copyOfRange

Project: https://github.com/FasterXML/jackson-datatypes-collections.git Detailed Report: https://oss-fuzz.com/testcase?key=6484937238511616 Project: jackson-datatypes-collections Fuzzing Engine: libFuzzer Fuzz Target: GuavaSerializerFuzzer Job Type: libfuzzerasanjackson-datatypes-collections...

jackson-datatypes-collections:GuavaSerializerFuzzer: Security exception in com.fasterxml.jackson.core.util.TextBuffer.carr

Project: https://github.com/FasterXML/jackson-datatypes-collections.git Detailed Report: https://oss-fuzz.com/testcase?key=5116391979876352 Project: jackson-datatypes-collections Fuzzing Engine: libFuzzer Fuzz Target: GuavaSerializerFuzzer Job Type: libfuzzerasanjackson-datatypes-collections...

jackson-datatypes-collections:GuavaSerializerFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Project: https://github.com/FasterXML/jackson-datatypes-collections.git Detailed Report: https://oss-fuzz.com/testcase?key=4856038293372928 Project: jackson-datatypes-collections Fuzzing Engine: libFuzzer Fuzz Target: GuavaSerializerFuzzer Job Type: libfuzzerasanjackson-datatypes-collections...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues. IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data has migrated to a new base image for the Operators used by our Speech Services. The following vulnerabilities...

snakeyaml: Denial of Service due to missing nested depth limitation for collections

A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service DoS due to missing nested depth limitation for collections...

SUSE CVE-2015-7501

Red Hat JBoss A-MQ 6.x; BPM Suite BPMS 6.x; BRMS 6.x and 5.x; Data Grid JDG 6.x; Data Virtualization JDV 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works FSW 6.x; Operations Network JBoss ON 3.x; Portal 6.x; SOA Platform SOA-P 5.x; Web Server JWS 3.x;...

snakeyaml: Denial of Service due to missing nested depth limitation for collections

A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service DoS due to missing nested depth limitation for collections...

snakeyaml: Denial of Service due to missing nested depth limitation for collections

A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service DoS due to missing nested depth limitation for collections...

Adobe Bridge Out-of-Bounds Read Vulnerability (CNVD-2023-76928)

Adobe Bridge is a powerful creative resource manager that lets users quickly and easily preview, organize, edit, and publish multiple creative resources, edit metadata, and add keywords, tags, and ratings to material resources.Adobe Bridge uses collections to organize assets and find assets using...

vilnacollections.yivo.org Cross Site Scripting vulnerability OBB-3720174

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

snakeyaml: Denial of Service due to missing nested depth limitation for collections

A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service DoS due to missing nested depth limitation for collections...

collections-aristophil.com Cross Site Scripting vulnerability OBB-3642147

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...