CVE-2021-20190

CVE-2021-20190 is a Jackson Databind deserialization vulnerability involving the interaction between serialization gadgets and typing, present in Jackson Databind up to 2.9.10.7. The IBM bulletin for Cloudera Observability confirms this CVE as part of a collection and notes a fix in Cloudera Obse...

CVE-2015-0495

CVE-2015-0495 affects Oracle Commerce Platform 3.x and 11.x; vulnerability in the Workbench component of Oracle Commerce Guided Search/Commerce Experience Manager enables remote arbitrary code execution (CNVD-2015-02593) and Oracle Endeca Workbench handling (ZDI-15-146). Root cause centers on vul...