Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-8818 State: PUBLISHED Published: 2020-02-25T01:20:39 Last Updated: 2024-08-04T10:12:10.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback request with a valid signature but without real payment) and/or receive all of the subsequent payments. Additional Analyst Notes: - CVE Pro
d signature but without real payment) and/or receive all of the subsequent payments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cardgate/magento2/blob/715979e54e1a335d78a8c5586f9e9987c3bf94fd/Controller/Payment/Callback.php#L88-L107 - https://github.com/cardgate/magento2/issues/54 - http://packetstormsecurity.com/files/156505/Magento-WooCommerce-CardGate-Payment-Gateway-2.0.30-Bypass.html
CVE ID: CVE-2020-8819 State: PUBLISHED Published: 2020-02-25T01:15:55 Last Updated: 2024-08-04T10:12:10.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback request with a valid signature but without real payment) and/or receive all of the subsequent payments. Additional Analyst Notes: - CVE Program Con
ure but without real payment) and/or receive all of the subsequent payments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cardgate/woocommerce/blob/f2111af7b1a3fd701c1c5916137f3ac09482feeb/cardgate/cardgate.php#L426-L442 - https://github.com/cardgate/woocommerce/issues/18 - http://packetstormsecurity.com/files/156504/WordPress-WooCommerce-CardGate-Payment-Gateway-3.1.15-Bypass.html - https://www.exploit-db.com/exploits/48134 - https://wpvulndb.com/vulnerabilities/10097
CVE ID: CVE-2020-8820 State: PUBLISHED Published: 2020-10-12T15:52:43 Last Updated: 2024-08-04T10:12:10.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed. Additional Analyst Notes: - CVE Program Container: References: - https://www.webmin.com/security.html
CVE ID: CVE-2020-8821 State: PUBLISHED Published: 2020-10-12T15:54:34 Last Updated: 2024-08-04T10:12:10.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered (however, JavaScript is not executed). Changes are kept across users. Additional Analyst Notes: - CVE Program Container: References: - https://www.webmin.com/security.html
CVE ID: CVE-2020-8822 State: PUBLISHED Published: 2020-02-10T01:52:37 Last Updated: 2024-08-04T10:12:10.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web application. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/02/digi-transport-stored-xss-on-wr-family.html
CVE ID: CVE-2020-8823 State: PUBLISHED Published: 2020-02-10T02:06:25 Last Updated: 2024-08-04T10:12:10.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theyiyibest/Reflected-XSS-on-SockJS - https://www.sockjs.org - https://snyk.io/vuln/SNYK-JS-SOCKJS-548397 - https://github.com/theyiyibest/Reflected-XSS-on-SockJS/issues/1
CVE ID: CVE-2020-8824 State: PUBLISHED Published: 2020-02-19T16:10:59 Last Updated: 2024-08-04T10:12:10.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/9thplayer/df042fe48c314dbc1afad80ffed8387d
CVE ID: CVE-2020-8825 State: PUBLISHED Published: 2020-02-10T11:14:37 Last Updated: 2024-08-04T10:12:10.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hacky1997/CVE-2020-8825 - http://packetstormsecurity.com/files/156281/Vanilla-Forum-2.6.3-Cross-Site-Scripting.html
CVE ID: CVE-2020-8826 State: PUBLISHED Published: 2020-04-08T19:38:54 Last Updated: 2024-08-04T10:12:10.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/argoproj/argo/releases - https://www.soluble.ai/blog/argo-cves-2020 - https://argoproj.github.io/argo-cd/security_considerations/
CVE ID: CVE-2020-8827 State: PUBLISHED Published: 2020-04-08T19:43:40 Last Updated: 2024-08-04T10:12:10.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/argoproj/argo/releases - https://www.soluble.ai/blog/argo-cves-2020 - https://argoproj.github.io/argo-cd/security_considerations/ - https://argoproj.github.io/argo-cd/operator-manual/user-management/#disable-admi
b.io/argo-cd/security_considerations/ - https://argoproj.github.io/argo-cd/operator-manual/user-management/#disable-admin-user
CVE ID: CVE-2020-8828 State: PUBLISHED Published: 2020-04-08T19:49:14 Last Updated: 2024-08-04T10:12:10.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: As of v1.5.0, the default admin password is set to the argocd-server pod name. For insiders with access to the cluster or logs, this issue could be abused for privilege escalation, as Argo has privileged roles. A malicious insider is the most realistic threat, but pod names are not meant to be kept secret and could wind up just about anywhere. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/argoproj/argo/releases - https://www.soluble.ai/blog/argo-cves-2020 - https://argoproj.github.io/argo-
ttps://github.com/argoproj/argo/releases - https://www.soluble.ai/blog/argo-cves-2020 - https://argoproj.github.io/argo-cd/security_considerations/
CVE ID: CVE-2020-8829 State: PUBLISHED Published: 2020-05-05T17:10:23 Last Updated: 2024-08-04T10:12:10.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE ID: CVE-2020-8830 State: PUBLISHED Published: 2020-05-05T17:12:17 Last Updated: 2024-08-04T10:12:10.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE ID: CVE-2020-8831 State: PUBLISHED Published: 2020-04-22T21:15:18.418314Z Last Updated: 2024-09-16T19:00:55.009Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: Canonical Products: Apport Problem Types: CWE-379 Description: Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directory. This allows for a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport's lock file location. Th
r a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport's lock file location. This file could then be used to escalate privileges, for example. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1862348 - https://usn.ubuntu.com/4315-1/ - https://usn.ubuntu.com/4315-2/
CVE ID: CVE-2020-8832 State: PUBLISHED Published: 2020-04-09T23:50:17.178011Z Last Updated: 2024-09-17T02:51:41.129Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Ubuntu Products: 18.04 LTS (bionic) Linux kernel Problem Types: CWE-200 Description: The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information. Additional Analyst Notes: - CVE Program Container: References:
d use this vulnerability to expose sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840 - https://usn.ubuntu.com/usn/usn-4302-1 - https://security.netapp.com/advisory/ntap-20200430-0004/
CVE ID: CVE-2020-8833 State: PUBLISHED Published: 2020-04-22T21:15:18.859159Z Last Updated: 2024-09-16T20:53:27.660Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Canonical Products: Apport Problem Types: CWE-367 Description: Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash files of size 0. A symlink with the same name as the deleted file can then be created upon which chown will be called, changing the file own
ymlink with the same name as the deleted file can then be created upon which chown will be called, changing the file owner to root. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4315-1/ - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1862933 - https://usn.ubuntu.com/4315-2/
CVE ID: CVE-2020-8834 State: PUBLISHED Published: 2020-04-09T22:10:14.975025Z Last Updated: 2024-09-16T22:03:01.562Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Linux kernel Products: Linux kernel Problem Types: CWE-368 Description: KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV:
here were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR:
("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file") Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/04/06/2 - https://usn.ubuntu.com/usn/usn-4318-1 - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1867717 - https://usn.ubuntu.com/4318-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html
CVE ID: CVE-2020-8835 State: PUBLISHED Published: 2020-04-02T18:00:23.885957Z Last Updated: 2024-09-17T02:15:48.820Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Linux kernel Products: Linux kernel Problem Types: n/a Description: In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780) A
was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780) Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4313-1/ - https://www.thezdi.com/blog/2020/3/19/pwn2own-2020-day-one-results - https://lore.kernel.org/bpf/20200330160324.15259-1-daniel%40iogearbox.net/T/ - https://www.openwall.com/lists/oss-security/2020/03/30/3 - https://usn.ubuntu.com/usn/usn-4313-1 - https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git/commit/?id=f2d67fec0b43edce8c416101cdc52e71145b5fef - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2d67fec0b43edce8c416101cdc52e71145b
fef - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2d67fec0b43edce8c416101cdc52e71145b5fef - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7OONYGMSYBEFHLHZJK3GOI5Z553G4LD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBWSHZ6DJIZVXKXGZPK6QPFCY7VKZEG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TF4PQZBEPNXDSK5DOBMW54OCLP25FTCD/ - https://security.netapp.com/advisory/ntap-20200430-0004/ - http://www.openwall.com/lists/oss-security/2021/07/20/1
CVE ID: CVE-2020-8838 State: PUBLISHED Published: 2020-03-23T16:05:43 Last Updated: 2024-08-04T10:12:10.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attacker on an adjacent network to execute code with NT AUTHORITY/SYSTEM privileges on the agent machines by providing an arbitrary executable via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/asset-explorer/sp-readme.html - http://seclists.org/fulldisclosure/2020/May/29 -
- https://www.manageengine.com/products/asset-explorer/sp-readme.html - http://seclists.org/fulldisclosure/2020/May/29 - http://packetstormsecurity.com/files/157612/ManageEngine-Asset-Explorer-Windows-Agent-Remote-Code-Execution.html
CVE ID: CVE-2020-8839 State: PUBLISHED Published: 2020-02-12T14:42:03 Last Updated: 2024-08-04T10:12:10.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TF_submask field. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1eDN0rsGPs4-yxeMxl7MGh__yjdbl-wON - http://packetstormsecurity.com/files/156289/CHIYU-BF430-TCP-IP-Converter-Cross-Site-Scripting.html
CVE ID: CVE-2020-8840 State: PUBLISHED Published: 2020-02-10T19:41:58 Last Updated: 2024-08-04T10:12:10.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r078e68a926ea6be12e8404e47f45aabf04bb4668e8265c0de41db6db%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r319f19c74e06c201b9d4e8b282a4e4b2da6dcda022fb46f007dd00d3%40%3Ccommits.druid.apache.org%3E - https://lists.debian.org/debian-lts-announce/202
e8b282a4e4b2da6dcda022fb46f007dd00d3%40%3Ccommits.druid.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/02/msg00020.html - https://lists.apache.org/thread.html/r3d20a2660b36551fd8257d479941782af4a7169582449fac1704bde2%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/rb43f9a65150948a6bebd3cb77ee3e105d40db2820fd547528f4e7f89%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9ecf211c22760b00967ebe158c6ed7dba9142078e2a630ab8904a5b7%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r3539bd3a377991217d724879d239e16e86001c54160076408574e1da%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/t
377991217d724879d239e16e86001c54160076408574e1da%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r6fdd4c61a09a0c89f581b4ddb3dc6f154ab0c705fcfd0a7358b2e4e5%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/re7326b8655eab931f2a9ce074fd9a1a51b5db11456bee9b48e1e170c%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r428d068b2a4923f1a5a4f5fc6381b95205cfe7620169d16db78e9c71%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r46bebdeb59b8b7212d63a010ca445a9f5c4e9d64dcf693cab6f399d3%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/re8ae2670ec456ef1c5a2a661a283
f693cab6f399d3%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/re8ae2670ec456ef1c5a2a661a2838ab2cd00e9efa1e88c069f546f21%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r8170007fd9b263d65b37d92a7b5d7bc357aedbb113a32838bc4a9485%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rac5ee5d686818be7e7c430d35108ee01a88aae54f832d32f62431fd1%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rdf8d389271a291dde3b2f99c36918d6cb1e796958af626cc140fee23%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rb5eedf90ba3633e171a2ffdfe484651c9490dc5df74c8a29244cbc0e%40%3Ccommi
pache.org%3E - https://lists.apache.org/thread.html/rb5eedf90ba3633e171a2ffdfe484651c9490dc5df74c8a29244cbc0e%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r65ee95fa09c831843bac81eaa582fdddc2b6119912a72d1c83a9b882%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rb99c7321eba5d4c907beec46675d52827528b738cfafd48eb4d862f1%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/rdea588d4a0ebf9cb7ce8c3a8f18d0d306507c4f8ba178dd3d20207b8%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/r1c09b9551f6953dbeca190a4c4b78198cdbb9825fce36f96fe3d8218%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/rc0
1f6953dbeca190a4c4b78198cdbb9825fce36f96fe3d8218%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/rc068e824654c4b8bd4f2490bec869e29edbfcd5dfe02d47cbf7433b2%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/rc717fd6c65190f4e592345713f9ef0723fb7d71f624caa2a17caa26a%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/rdf311f13e6356297e0ffe74397fdd25a3687b0a16e687c3ff5b834d8%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/rf28ab6f224b48452afd567dfffb705fbda0fdbbf6535f6bc69d47e91%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/r2fa8046bd47fb407ca09b5107a80fa6147ba4ebe879caae5c98b7657%40%3Cdev.ranger.ap
g%3E - https://lists.apache.org/thread.html/r2fa8046bd47fb407ca09b5107a80fa6147ba4ebe879caae5c98b7657%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/r5d8bea8e9d17b6efcf4a0e4e194e91ef46a99f505777a31a60da2b38%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/r94930e39b60fff236160c1c4110fe884dc093044b067aa5fc98d7ee1%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/r446646c5588b10f5e02409ad580b12f314869009cdfbf844ca395cec%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/r1efc776fc6ce3387593deaa94bbdd296733b1b01408a39c8d1ab9e0e%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/rfc1ccfe89332155b72ce
dd296733b1b01408a39c8d1ab9e0e%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/rfc1ccfe89332155b72ce17f13a2701d3e7b9ec213324ceb90e79a28a%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/r9e59ebaf76fd00b2fa3ff5ebf18fe075ca9f4376216612c696f76718%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/rcc72b497e3dff2dc62ec9b89ceb90bc4e1b14fc56c3c252a6fcbb013%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/r7762d69e85c58d6948823424017ef4c08f47de077644277fa18cc116%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/ra275f29615f35d5b40106d1582a41e5388b2a5131564e9e01a572987%40%3Cdev.ranger.apache.org%3E - htt
sts.apache.org/thread.html/ra275f29615f35d5b40106d1582a41e5388b2a5131564e9e01a572987%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/rb73708bf714ed6dbc1212da082e7703e586077f0c92f3940b2e82caf%40%3Cdev.ranger.apache.org%3E - https://lists.apache.org/thread.html/r7e5c10534ed06bf805473ac85e8412fe3908a8fa4cabf5027bf11220%40%3Cdev.kafka.apache.org%3E - https://lists.apache.org/thread.html/r8e96c340004b7898cad3204ea51280ef6e4b553a684e1452bf1b18b1%40%3Cjira.kafka.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://list
hread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/FasterXML/jackson-databind/issues/2620 - https://security.netapp.com/advisory/ntap-20200327-0002/ - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-01-fastjason-en