Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-28133 State: PUBLISHED Published: 2021-03-18T13:59:36 Last Updated: 2024-08-03T21:33:17.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to share the private part of their screen. When a user shares a specific application window via the Share Screen functionality, other meeting participants can briefly see contents of other application windows that were explicitly not shared. The contents of these other windows can (for instance) be seen for a short period of time when they overlay the shared window and get into focus
her windows can (for instance) be seen for a short period of time when they overlay the shared window and get into focus. (An attacker can, of course, use a separate screen-recorder application, unsupported by Zoom, to save all such contents for later replays and analysis.) Depending on the unintentionally shared data, this short exposure of screen contents may be a more or less severe security issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-044.txt - https://zoom.us/trust/security/security-bulletin - https://www.youtube.com/watch?v=SonmmgQlLzg - https://www.syss.de/pentest-blog/syss-2020-044-s
urity/security-bulletin - https://www.youtube.com/watch?v=SonmmgQlLzg - https://www.syss.de/pentest-blog/syss-2020-044-sicherheitsproblem-in-screen-sharing-funktionalitaet-von-zoom-cve-2021-28133 - http://seclists.org/fulldisclosure/2021/Mar/48 - https://thehackernews.com/2021/03/new-zoom-screen-sharing-bug-lets-other.html - http://packetstormsecurity.com/files/161897/Zoom-5.4.3-54779.1115-5.5.4-13142.0301-Information-Disclosure.html
CVE ID: CVE-2021-28134 State: PUBLISHED Published: 2021-03-11T00:00:22 Last Updated: 2024-08-03T21:33:17.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AkashRajpurohit/clipper/issues/13 - https://github.com/AkashRajpurohit/clipper/releases/tag/v1.0.5 - https://github.com/AkashRajpurohit/clipper/pull/14 - https://github.com/AkashRajpurohit/clipper/pull/14/commits/28f1492a12234cf1e6af85c78bf22ee2
Rajpurohit/clipper/pull/14 - https://github.com/AkashRajpurohit/clipper/pull/14/commits/28f1492a12234cf1e6af85c78bf22ee2f5090d19
CVE ID: CVE-2021-28135 State: PUBLISHED Published: 2021-09-07T05:56:29 Last Updated: 2024-08-03T21:33:17.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (crash) in ESP32 by flooding the target device with LMP Feature Response data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espressif/esp-idf - https://github.com/espressif/esp32-bt-lib - https://www.espressif.com/en/products/socs/esp32 - https://dl.packetstormsecurity.net
ithub.com/espressif/esp32-bt-lib - https://www.espressif.com/en/products/socs/esp32 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-28136 State: PUBLISHED Published: 2021-09-07T05:52:46 Last Updated: 2024-08-03T21:33:17.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range to trigger memory corruption (and consequently a crash) in ESP32 via a replayed (duplicated) LMP packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espressif/esp-idf - https://github.com/espressif/esp32-bt-lib - https://www.espressif.com/en/products/socs/esp32 - https:
spressif/esp-idf - https://github.com/espressif/esp32-bt-lib - https://www.espressif.com/en/products/socs/esp32 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-28139 State: PUBLISHED Published: 2021-09-07T06:27:53 Last Updated: 2024-08-03T21:33:17.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espressif/esp-idf - https://github.com/espressif/esp32-bt-lib - https://www.espressif.com/en/products/socs/esp32 - https://dl.packetstormsecu
ttps://github.com/espressif/esp32-bt-lib - https://www.espressif.com/en/products/socs/esp32 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-28141 State: PUBLISHED Published: 2021-03-11T16:25:57 Last Updated: 2024-08-03T21:33:17.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use the parameter _TSM_HiddenField_ and inject a command at the end of the URI. NOTE: the vendor states that this is not a vulnerability. The request's output does not indicate that a "true" command was executed on the server, and the request's ou
erability. The request's output does not indicate that a "true" command was executed on the server, and the request's output does not leak any private source code or data from the server Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/JULpfvFJ - https://gist.github.com/shreyasfegade/e2480e26b2ed1d0c7175ecf7cb15f9c1
CVE ID: CVE-2021-28142 State: PUBLISHED Published: 2021-04-06T14:07:23 Last Updated: 2024-08-03T21:33:17.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete." Additional Analyst Notes: - CVE Program Container: References: - https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html - http://packetstormsecurity.com/files/162182/CITSmart-ITSM-9.1.2.27-SQL-Injection.html
CVE ID: CVE-2021-28143 State: PUBLISHED Published: 2021-03-11T21:45:55 Last Updated: 2024-08-03T21:33:17.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools). Additional Analyst Notes: - CVE Program Container: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10207 - https://github.com/vitorespf/Advisories/blob/master/DLINK-DIR-841-command-injection.txt
CVE ID: CVE-2021-28144 State: PUBLISHED Published: 2021-03-11T16:02:05 Last Updated: 2024-08-03T21:33:17.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://www.iot-inspector.com/blog/advisory-d-link-dir-3060/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10208 - http://seclists.org/fulldisclosure/2021/Mar/23 - http://packetstormsecurity.com/files/1
publication.aspx?name=SAP10208 - http://seclists.org/fulldisclosure/2021/Mar/23 - http://packetstormsecurity.com/files/161757/D-Link-DIR-3060-1.11b04-Command-Injection.html
CVE ID: CVE-2021-28145 State: PUBLISHED Published: 2021-03-18T15:44:02 Last Updated: 2024-08-03T21:33:17.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted survey block. This requires at least Editor privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.concrete5.org/developers/security - https://documentation.concrete5.org/developers/introduction/version-history/855-release-notes
CVE ID: CVE-2021-28146 State: PUBLISHED Published: 2021-03-22T14:00:36 Last Updated: 2024-08-03T21:33:17.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team permissions that the user isn't supposed to have. Additional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/t/release-notes-v6-7-x/27119 - https://grafana.com/products/enterprise/ - https://www.openw
ttps://community.grafana.com/t/release-notes-v6-7-x/27119 - https://grafana.com/products/enterprise/ - https://www.openwall.com/lists/oss-security/2021/03/19/5 - https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/ - https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724 - https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/ - https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/
CVE ID: CVE-2021-28147 State: PUBLISHED Published: 2021-03-22T14:03:53 Last Updated: 2024-08-03T21:40:12.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated user to add external groups to any existing team. This can be used to grant a user team permissions that the user isn't supposed to have. Additional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/
isn't supposed to have. Additional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/t/release-notes-v6-7-x/27119 - https://grafana.com/products/enterprise/ - https://www.openwall.com/lists/oss-security/2021/03/19/5 - https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/ - https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724 - https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/ - https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/ - https://security.netapp.com/advisory/ntap-20210430-0005/
CVE ID: CVE-2021-28148 State: PUBLISHED Published: 2021-03-22T14:06:40 Last Updated: 2024-08-03T21:40:12.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance. Additional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/t/release-notes-v6-7-x/27119 - https://grafana.com/products/enterprise/ - https://www.open
https://community.grafana.com/t/release-notes-v6-7-x/27119 - https://grafana.com/products/enterprise/ - https://www.openwall.com/lists/oss-security/2021/03/19/5 - https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/ - https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724 - https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/ - https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/ - https://security.netapp.com/advisory/ntap-20210430-0005/
CVE ID: CVE-2021-28149 State: PUBLISHED Published: 2021-05-06T15:12:30 Last Updated: 2024-08-03T21:40:12.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ (e.g., ../../etc/passwd) This can be carried out with a web browser by changing the file name accordingly. Upon visiting log_download.cgi?type=../../etc/passwd and logging in, the web server will allow a download of the contents of the /etc/passwd file. Additional Analyst Notes: - CVE Program C
the web server will allow a download of the contents of the /etc/passwd file. Additional Analyst Notes: - CVE Program Container: References: - http://en.hongdian.com/Products/Details/H8922 - https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/
CVE ID: CVE-2021-28150 State: PUBLISHED Published: 2021-05-06T15:12:09 Last Updated: 2024-08-03T21:40:12.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://en.hongdian.com/Products/Details/H8922 - https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/
CVE ID: CVE-2021-28151 State: PUBLISHED Published: 2021-05-06T15:11:50 Last Updated: 2024-08-03T21:40:12.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest. Additional Analyst Notes: - CVE Program Container: References: - http://en.hongdian.com/Products/Details/H8922 - https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/
CVE ID: CVE-2021-28152 State: PUBLISHED Published: 2021-05-06T15:11:59 Last Updated: 2024-08-03T21:40:12.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a superuser. To connect, the telnet service is used on port 5188 with the default credentials of root:superzxmn. Additional Analyst Notes: - CVE Program Container: References: - http://en.hongdian.com/Products/Details/H8922 - https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/
CVE ID: CVE-2021-28153 State: PUBLISHED Published: 2021-03-11T21:04:15 Last Updated: 2024-08-03T21:40:12.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.) Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.o
ile correctly remain unchanged.) Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/glib/-/issues/2325 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RXTD5HCP2K4AAUSWWZTBKQNHRCTAEOF/ - https://security.netapp.com/advisory/ntap-20210416-0003/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICUTQPHZNZWX2DZR46QFLQZRHVMHIILJ/ - https://security.gentoo.org/glsa/202107-13 - https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html
CVE ID: CVE-2021-28154 State: PUBLISHED Published: 2021-03-11T21:14:43 Last Updated: 2024-08-03T21:40:12.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it does not allow any remote scripts to be opened, no unsafe scripts to be evaluated, no remote sites to be browsed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/camunda/camunda-modeler/issues/2143
CVE ID: CVE-2021-28155 State: PUBLISHED Published: 2021-09-07T05:57:18 Last Updated: 2024-08-03T21:40:12.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown a device by flooding the target device with LMP Feature Response data. Additional Analyst Notes: - CVE Program Container: References: - https://www.jbl.com.sg/over-ear-headphones/JBL+TUNE500BT.html - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-28156 State: PUBLISHED Published: 2021-04-20T15:02:58 Last Updated: 2024-08-03T21:40:12.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10. Additional Analyst Notes: - CVE Program Container: References: - https://www.hashicorp.com/blog/category/consul - https://discuss.hashicorp.com/t/hcsec-2021-08-consul-enterprise-audit-log-bypass-for-http-events/23369 - https://security.gentoo.org/glsa/202208-09
CVE ID: CVE-2021-28157 State: PUBLISHED Published: 2021-04-14T19:40:17 Last Updated: 2024-08-03T21:40:12.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete. Additional Analyst Notes: - CVE Program Container: References: - https://devolutions.net/security/advisories/DEVO-2021-0004
CVE ID: CVE-2021-28160 State: PUBLISHED Published: 2021-03-18T18:42:32 Last Updated: 2024-08-03T21:40:12.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) suffers from a reflected XSS vulnerability due to unsanitized SSID value when the latter is displayed in the /repeater.html page ("Repeater Wizard" homepage section). Additional Analyst Notes: - CVE Program Container: References: - https://www.amazon.com/Extender-Wireless-Repeater-External-Antennas/dp/B08GMCC6X2/ - https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990
CVE ID: CVE-2021-28161 State: PUBLISHED Published: 2021-03-12T21:40:14 Last Updated: 2024-08-03T21:40:12.191Z Vendors: The Eclipse Foundation Products: Eclipse Theia Problem Types: CWE-79 Description: In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse-theia/theia/issues/8794
CVE ID: CVE-2021-28162 State: PUBLISHED Published: 2021-03-12T21:40:15 Last Updated: 2024-08-03T21:40:12.087Z Vendors: The Eclipse Foundation Products: Eclipse Theia Problem Types: CWE-830 Description: In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse-theia/theia/issues/7283
CVE ID: CVE-2021-28163 State: PUBLISHED Published: 2021-04-01T14:20:13 Last Updated: 2024-08-03T21:40:12.280Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: The Eclipse Foundation Products: Eclipse Jetty Problem Types: CWE-200 Description: In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/jetty.project/security/adviso
dditional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq - https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E - https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E - https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r787
24cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r787e47297a614b05b99d01b04c8a1d6c0cafb480c9cb7c624a6b8fc3%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E - https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E - https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HAAKW7
.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HAAKW7S66TECXGJZWB3ZFGOQAK34IYHF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5CXQIJVYU4R3JL6LSPXQ5GIV7WLLA7PI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGNKXBNRRCZTGGXPIX3VBWCF2SAM3DWS/ - https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thr
/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E - https://security.netapp.com/advisory/ntap-20210611-0006/ - https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/rf36f1114e84a3379b20587063686148e2d5a39abc0b8a66ff2a9087a%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.