Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-26192 State: PUBLISHED Published: 2021-02-09T21:25:20.232837Z Last Updated: 2024-09-17T02:21:45.315Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-306 Description: Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH may potentially exploit this vulnerability to read arbitrary data, tamper with system software or deny service to users. Note: no non-admin users or roles have these privileges by default. Additional Analyst Notes: - CVE Program Container: References: - https://www
or roles have these privileges by default. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2020-26193 State: PUBLISHED Published: 2021-02-09T21:25:20.858293Z Last Updated: 2024-09-16T21:57:50.555Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-20 Description: Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISI_PRIV_CLUSTER privilege may exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000182873/dsa-20
ditional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2020-26194 State: PUBLISHED Published: 2021-02-09T21:25:21.429084Z Last Updated: 2024-09-17T02:12:12.840Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-732 Description: Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 contain an Incorrect Permission Assignment for a Critical Resource vulnerability. This may allow a non-admin user with either ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH privileges to exploit the vulnerability, leading to compromised cryptographic operations. Note: no non-admin users or roles have these privileges by default. Additional Analyst Notes: - CVE Program Container: Refer
: no non-admin users or roles have these privileges by default. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2020-26195 State: PUBLISHED Published: 2021-02-09T21:25:22.012221Z Last Updated: 2024-09-16T23:55:55.907Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-280 Description: Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user. A remote unauthenticated attacker may take advantage of this issue to slow down the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulne
https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2020-26196 State: PUBLISHED Published: 2021-02-09T21:25:22.595334Z Last Updated: 2024-09-16T18:24:05.636Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-732 Description: Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentially exploit this vulnerability resulting in the ability to write data outside of the intended file system location. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-
er: References: - https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2020-26197 State: PUBLISHED Published: 2021-04-20T16:45:16.477956Z Last Updated: 2024-09-16T17:23:27.293Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-326 Description: Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication provider. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185202
CVE ID: CVE-2020-26198 State: PUBLISHED Published: 2020-12-16T15:50:13.965718Z Last Updated: 2024-09-17T03:53:53.693Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-79 Description: Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link. Additional Analyst Notes: - CVE Program Container: References: - https:
victim in to following a specially crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000181088/dsa-2020-268-dell-emc-idrac9-reflected-xss-vulnerability
CVE ID: CVE-2020-26199 State: PUBLISHED Published: 2021-01-05T21:40:22.660775Z Last Updated: 2024-09-16T20:17:54.764Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unity Problem Types: CWE-532 Description: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password is stored in a plain text in multiple log files. A local authenticated attacker with access to the log files may use the exposed password to gain access with the privileges of the compromised user. Additional Analyst Notes: - CVE Program Contai
osed password to gain access with the privileges of the compromised user. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000181248
CVE ID: CVE-2020-26200 State: PUBLISHED Published: 2021-02-26T13:30:23 Last Updated: 2024-08-04T15:49:07.172Z Vendors: N/A Products: Kaspersky Rescue Disk Version, Kaspersky Endpoint Security with the Full Disk Encryption component installed Problem Types: Bypass Description: A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the comput
This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#170221
CVE ID: CVE-2020-26201 State: PUBLISHED Published: 2020-12-10T21:02:39 Last Updated: 2024-08-04T15:49:07.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH. Additional Analyst Notes: - CVE Program Container: References: - https://www.askey.com.tw/ - https://www.askey.com.tw/incident_report_notifications.html - https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3
ium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d
CVE ID: CVE-2020-26205 State: PUBLISHED Published: 2020-10-29T20:00:20 Last Updated: 2024-08-04T15:49:07.249Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N) Vendors: salopensource Products: Sal Problem Types: CWE-79 Description: Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machine_list view. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/salopensource/sal/pull/405 - https://github.com/salopensource/sal/commit/145bb72daf8460bdedbbc9fb708d346283e7a568
CVE ID: CVE-2020-26207 State: PUBLISHED Published: 2020-11-04T22:00:17 Last Updated: 2024-08-04T15:49:07.140Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: martinjw Products: dbschemareader Problem Types: CWE-502 Description: DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a workaround, ensure `.dbschema` files from untrusted sources are not opened. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/martinjw/dbschemareader/security/advisories/GHSA-rfjh-m356-mpqf - https://github.co
er: References: - https://github.com/martinjw/dbschemareader/security/advisories/GHSA-rfjh-m356-mpqf - https://github.com/martinjw/dbschemareader/commit/4c0ab7b1fd8c4e3140f9fd54d303f107a9c8d994 - https://github.com/martinjw/dbschemareader/releases/tag/2.7.4.3
CVE ID: CVE-2020-26208 State: PUBLISHED Published: 2022-02-02T11:51:22.000Z Last Updated: 2025-05-05T17:07:29.955Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting in a program crash or potentially incorrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue. Additional
orrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1900821 - https://github.com/Matthias-Wandel/jhead/issues/7 - https://github.com/F-ZhaoYang/jhead/commit/5186ddcf9e35a7aa0ff0539489a930434a1325f4 - https://github.com/F-ZhaoYang/jhead/security/advisories/GHSA-7pr6-xq4f-qhgc
CVE ID: CVE-2020-26210 State: PUBLISHED Published: 2020-11-03T18:20:15 Last Updated: 2024-08-04T15:49:07.224Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: BookStackApp Products: BookStack Problem Types: CWE-79 Description: In BookStack before version 0.30.4, a user with permissions to edit a page could add an attached link which would execute untrusted JavaScript code when clicked by a viewer of the page. Dangerous content may remain in the database after this update. If you think this could have been exploited the linked advisory provides a SQL query to test. As a workaround, page edit permissions could be limited to only those that are trusted until you c
a SQL query to test. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade although this will not address existing exploitation of this vulnerability. The issue is fixed in version 0.30.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BookStackApp/BookStack/security/advisories/GHSA-7p2j-4h6p-cq3h - https://github.com/BookStackApp/BookStack/commit/349162ea139556b2d25e09e155cec84e21cc9227 - https://bookstackapp.com/blog/beta-release-v0-30-4/ - https://github.com/BookStackApp/BookStack/releases/tag/v0.30.4
CVE ID: CVE-2020-26211 State: PUBLISHED Published: 2020-11-03T21:00:18 Last Updated: 2024-08-04T15:49:07.293Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: BookStackApp Products: BookStack Problem Types: CWE-79 Description: In BookStack before version 0.30.4, a user with permissions to edit a page could insert JavaScript code through the use of `javascript:` URIs within a link or form which would run, within the context of the current page, when clicked or submitted. Additionally, a user with permissions to edit a page could insert a particular meta tag which could be used to silently redirect users to a alternative location upon visit of a page. Dangerous c
ular meta tag which could be used to silently redirect users to a alternative location upon visit of a page. Dangerous content may remain in the database but will be removed before being displayed on a page. If you think this could have been exploited the linked advisory provides a SQL query to test. As a workaround without upgrading, page edit permissions could be limited to only those that are trusted until you can upgrade although this will not address existing exploitation of this vulnerability. The issue is fixed in BookStack version 0.30.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BookStackApp/BookStack/releases/tag/v0.30.4 - https://github.co
CVE Program Container: References: - https://github.com/BookStackApp/BookStack/releases/tag/v0.30.4 - https://github.com/BookStackApp/BookStack/security/advisories/GHSA-r2cf-8778-3jgp - https://github.com/BookStackApp/BookStack/commit/bbd1384acbe7e52c21f89af69f2dc391c95dbf54 - https://www.bookstackapp.com/blog/beta-release-v0-30-4/
CVE ID: CVE-2020-26212 State: PUBLISHED Published: 2020-11-25T17:05:17 Last Updated: 2024-08-04T15:49:07.163Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-862 Description: GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.3, any authenticated user has read-only permissions to the planning of every other user, even admin ones. Steps to reproduce the behavior: 1. Create a new planning with 'eduardo.mozart' user (from 'IT' group that belongs
nes. Steps to reproduce the behavior: 1. Create a new planning with 'eduardo.mozart' user (from 'IT' group that belongs to 'Super-admin') into it's personal planning at 'Assistance' > 'Planning'. 2. Copy the CalDAV url and use a CalDAV client (e.g. Thunderbird) to sync the planning with the provided URL. 3. Inform the username and password from any valid user (e.g. 'camila' from 'Proativa' group). 4. 'Camila' has read-only access to 'eduardo.mozart' personal planning. The same behavior happens to any group. E.g. 'Camila' has access to 'IT' group planning, even if she doesn't belong to this group and has a 'Self-service' profile permission). This issue is fixed in version 9.5.3. As a workarou
t belong to this group and has a 'Self-service' profile permission). This issue is fixed in version 9.5.3. As a workaround, one can remove the `caldav.php` file to block access to CalDAV server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-qmw3-87hr-5wgx - https://github.com/glpi-project/glpi/commit/527280358ec78988ac57e9809d2eb21fcd74caf7 - https://github.com/glpi-project/glpi/releases/tag/9.5.3
CVE ID: CVE-2020-26213 State: PUBLISHED Published: 2020-11-06T16:45:14 Last Updated: 2024-08-04T15:49:07.177Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: kitabisa Products: teler Problem Types: CWE-476 Description: In teler before version 0.0.1, if you run teler inside a Docker container and encounter `errors.Exit` function, it will cause denial-of-service (`SIGSEGV`) because it doesn't get process ID and process group ID of teler properly to kills. The issue is patched in teler 0.0.1 and 0.0.1-dev5.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kitabisa/teler/security/advisories/GHSA-jhj6-5mh6-4pvf - https://githu
ogram Container: References: - https://github.com/kitabisa/teler/security/advisories/GHSA-jhj6-5mh6-4pvf - https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e
CVE ID: CVE-2020-26214 State: PUBLISHED Published: 2020-11-06T17:50:17 Last Updated: 2024-08-04T15:49:07.233Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: alerta Products: alerta Problem Types: CWE-287 Description: In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for anonymous authorization are affected. A fix has been implemented in version 8.1.0 that returns HTTP 401 Unauthorized response for any authentication att
cted. A fix has been implemented in version 8.1.0 that returns HTTP 401 Unauthorized response for any authentication attempts where the password field is empty. As a workaround LDAP administrators can disallow unauthenticated bind requests by clients. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alerta/alerta/security/advisories/GHSA-5hmm-x8q8-w5jh - https://github.com/alerta/alerta/issues/1277 - https://github.com/alerta/alerta/pull/1345 - https://github.com/alerta/alerta/commit/2bfa31779a4c9df2fa68fa4d0c5c909698c5ef65 - https://pypi.org/project/alerta-server/8.1.0/ - https://tools.ietf.org/html/rfc4513#section-5.1.2
CVE ID: CVE-2020-26215 State: PUBLISHED Published: 2020-11-18T21:20:13 Last Updated: 2024-08-04T15:49:07.159Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L) Vendors: jupyter Products: notebook Problem Types: CWE-601 Description: Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The iss
ink to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jupyter/notebook/security/advisories/GHSA-c7vm-f5p4-8fqh - https://github.com/jupyter/notebook/commit/3cec4bbe21756de9f0c4bccf18cf61d840314d74 - https://lists.debian.org/debian-lts-announce/2020/12/msg00004.html
CVE ID: CVE-2020-26216 State: PUBLISHED Published: 2020-11-17T20:45:20 Last Updated: 2024-08-04T15:49:07.226Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: TYPO3 Products: Fluid Problem Types: CWE-79 Description: TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting. Three XSS vulnerabilities have been detected in Fluid: 1. TagBasedViewHelper allowed XSS through maliciously crafted additionalAttributes arrays by creating keys with attribute-closing quotes followed by HTML. When rendering such attributes, TagBuilder would not escape the keys. 2. ViewHelpers which used the CompileWithContentArgumen
rendering such attributes, TagBuilder would not escape the keys. 2. ViewHelpers which used the CompileWithContentArgumentAndRenderStatic trait, and which declared escapeOutput = false, would receive the content argument in unescaped format. 3. Subclasses of AbstractConditionViewHelper would receive the then and else arguments in unescaped format. Update to versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 or 2.6.10 of this typo3fluid/fluid package that fix the problem described. More details are available in the linked advisory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3/Fluid/security/advisories/GHSA-hpjm-3ww5-6cpf - https://github.com/TYPO3/F
ainer: References: - https://github.com/TYPO3/Fluid/security/advisories/GHSA-hpjm-3ww5-6cpf - https://github.com/TYPO3/Fluid/commit/f20db4e74cf9803c6cffca2ed2f03e1b0b89d0dc - https://typo3.org/security/advisory/typo3-core-sa-2020-009
CVE ID: CVE-2020-26217 State: PUBLISHED Published: 2020-11-16T21:00:18 Last Updated: 2024-08-04T15:49:07.258Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: x-stream Products: xstream Problem Types: CWE-78 Description: XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14. Additional Analyst Note
ry provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/x-stream/xstream/security/advisories/GHSA-mw36-7c6c-q4q2 - https://x-stream.github.io/CVE-2020-26217.html - https://github.com/x-stream/xstream/commit/0fec095d534126931c99fd38e9c6d41f5c685c1a - https://lists.debian.org/debian-lts-announce/2020/12/msg00001.html - https://www.debian.org/security/2020/dsa-4811 - https://lists.apache.org/thread.html/redde3609b89b2a4ff18b536a06ef9a77deb93d47fda8ed28086fa8c3%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r826a006fda71cc96fc87b6eca4b5d195f19a29
6fa8c3%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r826a006fda71cc96fc87b6eca4b5d195f19a292ad36cea501682c38c%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r2de526726e7f4db4a7cb91b7355070779f51a84fd985c6529c2f4e9e%40%3Cissues.activemq.apache.org%3E - https://www.oracle.com/security-alerts/cpuApr2021.html - https://security.netapp.com/advisory/ntap-20210409-0004/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://lists.apache.org/thread.html/r7c9fc255edc0b9cd9567093d131f6d33fde4c662aaf912460ef630e9%40%3Ccommits.camel.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security
3Ccommits.camel.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html