Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14200 State: PUBLISHED Published: 2019-07-31T12:14:51 Last Updated: 2024-08-05T00:12:42.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14201 State: PUBLISHED Published: 2019-07-31T12:13:49 Last Updated: 2024-08-05T00:12:42.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14202 State: PUBLISHED Published: 2019-07-31T12:12:54 Last Updated: 2024-08-05T00:12:42.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14203 State: PUBLISHED Published: 2019-07-31T12:11:47 Last Updated: 2024-08-05T00:12:43.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14204 State: PUBLISHED Published: 2019-07-31T12:09:44 Last Updated: 2024-08-05T00:12:42.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14205 State: PUBLISHED Published: 2019-07-21T17:18:32 Last Updated: 2024-08-05T00:12:42.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php. Additional Analyst Notes: - CVE Program Container: References: - https://markgruffer.github.io/2019/07/19/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.html - https://wordpress.org/plugins/adaptive-images/#developers - https://github.com/markgruffer/markgruffer.gi
eletion.html - https://wordpress.org/plugins/adaptive-images/#developers - https://github.com/markgruffer/markgruffer.github.io/blob/master/_posts/2019-07-19-adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.markdown - https://wpvulndb.com/vulnerabilities/9468
CVE ID: CVE-2019-14206 State: PUBLISHED Published: 2019-07-21T17:18:52 Last Updated: 2024-08-05T00:12:42.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to delete arbitrary files via the $REQUEST['adaptive-images-settings'] parameter in adaptive-images-script.php. Additional Analyst Notes: - CVE Program Container: References: - https://markgruffer.github.io/2019/07/19/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.html - https://wordpress.org/plugins/adaptive-images/#developers - https://github.com/markgruffer/markgruffer.github.io/blob/
- https://wordpress.org/plugins/adaptive-images/#developers - https://github.com/markgruffer/markgruffer.github.io/blob/master/_posts/2019-07-19-adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.markdown - https://wpvulndb.com/vulnerabilities/9468
CVE ID: CVE-2019-14207 State: PUBLISHED Published: 2019-07-21T18:17:18 Last Updated: 2024-08-05T00:12:42.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function due to an endless loop resulting from confusing relationships between a child and parent object (caused by an append error). Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/109314
CVE ID: CVE-2019-14208 State: PUBLISHED Published: 2019-07-21T18:17:29 Last Updated: 2024-08-05T00:12:43.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-14209 State: PUBLISHED Published: 2019-07-21T18:17:37 Last Updated: 2024-08-05T00:12:43.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-14210 State: PUBLISHED Published: 2019-07-21T18:17:44 Last Updated: 2024-08-05T00:12:43.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Memory Corruption due to the use of an invalid pointer copy, resulting from a destructed string object. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-14211 State: PUBLISHED Published: 2019-07-21T18:17:55 Last Updated: 2024-08-05T00:12:43.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the lack of proper validation of the existence of an object prior to performing operations on that object when executing JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/109358
CVE ID: CVE-2019-14212 State: PUBLISHED Published: 2019-07-21T18:18:03 Last Updated: 2024-08-05T00:12:42.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/109313
CVE ID: CVE-2019-14213 State: PUBLISHED Published: 2019-07-21T18:18:10 Last Updated: 2024-08-05T00:12:43.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the repeated release of the signature dictionary during CSG_SignatureF and CPDF_Document destruction. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/109368
CVE ID: CVE-2019-14214 State: PUBLISHED Published: 2019-07-21T18:18:17 Last Updated: 2024-08-05T00:12:43.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a JavaScript Denial of Service when deleting pages in a document that contains only one page by calling a "t.hidden = true" function. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-14215 State: PUBLISHED Published: 2019-07-21T18:18:25 Last Updated: 2024-08-05T00:12:42.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling xfa.event.rest XFA JavaScript due to accessing a wild pointer. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-14216 State: PUBLISHED Published: 2019-08-14T20:03:03 Last Updated: 2024-08-05T00:12:42.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. wp-admin/admin.php?page=wp-svg-icons-custom-set mishandles Custom Icon uploads. CSRF leads to upload of a ZIP archive containing a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://zeroauth.ltd/blog/2019/08/09/cve-2019-14216-svg-vector-icon-plugin-wordpress-plugin-vulnerable-to-csrf-and-arbitrary-file-upload-leading-to-remote-code-execution/ - https://wpvulndb.com/vulnerabilities/9510
CVE ID: CVE-2019-14220 State: PUBLISHED Published: 2019-09-24T20:15:58 Last Updated: 2024-08-05T00:12:43.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine (VM) to enable Android apps to run on Windows or MacOS. Bug is in a local arbitrary file read through a system service call. The impacted method runs with System admin privilege and if given the file name as parameter returns you the content of file. A malicious app using the affected method can then read the content of any system file which it is not authorized to read Addi
cious app using the affected method can then read the content of any system file which it is not authorized to read Additional Analyst Notes: - CVE Program Container: References: - https://support.bluestacks.com/hc/en-us/articles/360021469391-Release-Notes - https://support.bluestacks.com/hc/en-us/articles/360033484132-BlueStacks-fails-to-restrict-access-permissions
CVE ID: CVE-2019-14221 State: PUBLISHED Published: 2019-08-08T12:34:21 Last Updated: 2024-08-05T00:12:43.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: 1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cccaaasser/1CRM-CVE/blob/master/CVE-2019-14221.md - https://www.exploit-db.com/exploits/47206
CVE ID: CVE-2019-14222 State: PUBLISHED Published: 2019-09-05T21:13:08 Last Updated: 2024-08-05T00:12:42.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker could exploit this vulnerability by using the extracted private key and bundling it into a PKCS12. A successful exploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java v
ploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java version, Solr version, etc.) as well as the ability to launch further attacks by leveraging the access to Alfresco's Solr Web Admin Interface. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14222-Default%20Certificate-Alfresco%20Community
CVE ID: CVE-2019-14223 State: PUBLISHED Published: 2019-09-06T16:04:29 Last Updated: 2024-08-05T00:12:43.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any protocol the attacker desires (e.g.,http, https, ftp, smb, etc.). Additional Analyst Notes: - CVE Program Container: References: - https://community.alfresco.com/content?filterID=all~objecttype~thread%5Bquestions%5D - https://github.co
: References: - https://community.alfresco.com/content?filterID=all~objecttype~thread%5Bquestions%5D - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14223-Open%20Redirect%20in%20Alfresco%20Share-Alfresco%20Community
CVE ID: CVE-2019-14224 State: PUBLISHED Published: 2019-09-05T21:01:19 Last Updated: 2024-08-05T00:12:42.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr configuration files and then receive a JMX connection from the victim, and serve a Java object that results in deserialization and code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShel
tion and code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14224-Authenticated%20Remote%20Code%20Execution-Alfresco%20Community
CVE ID: CVE-2019-14225 State: PUBLISHED Published: 2019-10-14T16:34:44 Last Updated: 2024-08-05T00:12:42.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.1 and 7.10.2 allows SSRF. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154826/Open-Xchange-OX-App-Suite-SSRF-XSS-Information-Disclosure-Access-Controls.html - https://seclists.org/fulldisclosure/2019/Oct/25
CVE ID: CVE-2019-14226 State: PUBLISHED Published: 2019-10-14T16:29:01 Last Updated: 2024-08-05T00:12:43.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.2 has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154826/Open-Xchange-OX-App-Suite-SSRF-XSS-Information-Disclosure-Access-Controls.html - https://seclists.org/fulldisclosure/2019/Oct/25
CVE ID: CVE-2019-14227 State: PUBLISHED Published: 2019-10-14T16:17:17 Last Updated: 2024-08-05T00:12:42.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.1 and 7.10.2 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Oct/25 - http://packetstormsecurity.com/files/154826/Open-Xchange-OX-App-Suite-SSRF-XSS-Information-Disclosure-Access-Controls.html
CVE ID: CVE-2019-14228 State: PUBLISHED Published: 2019-07-26T12:35:46 Last Updated: 2024-08-05T00:12:43.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF protection on the admin/includes/adminprocess.php endpoint, an attacker is able to chain the XSS with CSRF in order to cause remote exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://codecanyon.net/it
to cause remote exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://codecanyon.net/item/xavier-php-login-script-user-management/9146226 - https://m-q-t.github.io/notes/xavier-csrf-to-xss-takeover/
CVE ID: CVE-2019-14230 State: PUBLISHED Published: 2019-07-21T22:38:57 Last Updated: 2024-08-05T00:12:43.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress. One could exploit the id parameter in the set_count ajax nopriv handler due to there being no sanitization prior to use in a SQL query in saveQuestionVote. This allows an unauthenticated/unprivileged user to perform a SQL injection attack capable of remote code execution and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/07/21/1 - http://www.o
st Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/07/21/1 - http://www.openwall.com/lists/oss-security/2019/07/23/1
CVE ID: CVE-2019-14231 State: PUBLISHED Published: 2019-07-21T22:39:08 Last Updated: 2024-08-05T00:12:43.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress. One could exploit the points parameter in the ob_get_results ajax nopriv handler due to there being no sanitization prior to use in a SQL query in getResultByPointsTrivia. This allows an unauthenticated/unprivileged user to perform a SQL injection attack capable of remote code execution and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/07/21/
Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/07/21/1 - http://www.openwall.com/lists/oss-security/2019/07/23/1
CVE ID: CVE-2019-14232 State: PUBLISHED Published: 2019-08-02T00:00:00 Last Updated: 2024-08-05T00:12:42.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pro
atewords_html template filters, which were thus vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21topic/django-announce/jIoju2-KLDs - https://www.djangoproject.com/weblog/2019/aug/01/security-releases/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html - https://seclists.org/bugtraq/2019/Aug/15 - https://www.debian.org/security/2019/dsa-4498 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STVX7X7
msg00025.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK/ - https://security.netapp.com/advisory/ntap-20190828-0002/ - https://security.gentoo.org/glsa/202004-17 - http://www.openwall.com/lists/oss-security/2023/10/04/6 - http://www.openwall.com/lists/oss-security/2024/03/04/1
CVE ID: CVE-2019-14233 State: PUBLISHED Published: 2019-08-02T14:31:09 Last Updated: 2024-08-05T00:12:42.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to the behaviour of the underlying HTMLParser, django.utils.html.strip_tags would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities. Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21topic/django-announce/jIoju2-KLDs - https://www.djangoproject.com/weblog/20
urity/ - https://groups.google.com/forum/#%21topic/django-announce/jIoju2-KLDs - https://www.djangoproject.com/weblog/2019/aug/01/security-releases/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html - https://seclists.org/bugtraq/2019/Aug/15 - https://www.debian.org/security/2019/dsa-4498 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK/ - https://security.netapp.com/advisory/ntap-20190828-0002/ - https://security.gentoo.org/glsa/202004-17
CVE ID: CVE-2019-14234 State: PUBLISHED Published: 2019-08-09T12:16:44 Last Updated: 2024-08-05T00:12:42.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to an error in shallow key transformation, key and index lookups for django.contrib.postgres.fields.JSONField, and key lookups for django.contrib.postgres.fields.HStoreField, were subject to SQL injection. This could, for example, be exploited via crafted use of "OR 1=1" in a key or index name to return all records, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to the QuerySet.filt
all records, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to the QuerySet.filter() function. Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21topic/django-announce/jIoju2-KLDs - https://www.djangoproject.com/weblog/2019/aug/01/security-releases/ - https://seclists.org/bugtraq/2019/Aug/15 - https://www.debian.org/security/2019/dsa-4498 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK/
ts.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK/ - https://security.netapp.com/advisory/ntap-20190828-0002/ - https://security.gentoo.org/glsa/202004-17
CVE ID: CVE-2019-14235 State: PUBLISHED Published: 2019-08-02T14:34:22 Last Updated: 2024-08-05T00:12:42.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences. Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21topic/django-announce/jIoju2-KLDs - https://www.djangoproject.com/weblog/2019/aug/01/security-rel
s.google.com/forum/#%21topic/django-announce/jIoju2-KLDs - https://www.djangoproject.com/weblog/2019/aug/01/security-releases/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html - https://seclists.org/bugtraq/2019/Aug/15 - https://www.debian.org/security/2019/dsa-4498 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK/ - https://security.netapp.com/advisory/ntap-20190828-0002/ - https://security.gentoo.org/glsa/202004-17