Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
https://support.f5.com/csp/article/K08654551?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2019-13051 State: PUBLISHED Published: 2019-10-09T11:49:52 Last Updated: 2024-08-04T23:41:10.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi-Hole 4.3 allows Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://pi-hole.net/blog/ - https://github.com/pi-hole/pi-hole/commits/master - https://pi-hole.net/2019/09/21/pi-hole-4-3-2-release-notes/ - https://github.com/pi-hole/AdminLTE/pull/974
CVE ID: CVE-2019-13052 State: PUBLISHED Published: 2019-06-29T19:05:31 Last Updated: 2024-08-04T23:41:10.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=GRJ7i2J_Y80
CVE ID: CVE-2019-13053 State: PUBLISHED Published: 2019-06-29T19:06:37 Last Updated: 2024-08-04T23:41:10.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=EksyCO0DzYs
CVE ID: CVE-2019-13054 State: PUBLISHED Published: 2019-06-29T19:06:58 Last Updated: 2024-08-04T23:41:10.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/mame82/status/1143093313924452353
CVE ID: CVE-2019-13055 State: PUBLISHED Published: 2019-06-29T19:07:20 Last Updated: 2024-08-04T23:41:09.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=5z_PEZ5PyeA
CVE ID: CVE-2019-13056 State: PUBLISHED Published: 2019-07-02T15:18:53 Last Updated: 2024-08-04T23:41:10.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-mail and password because of the lack of CSRF protection. Additional Analyst Notes: - CVE Program Container: References: - https://cyberpanel.net/category/news/ - http://packetstormsecurity.com/files/153492/CyberPanel-1.8.4-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-13057 State: PUBLISHED Published: 2019-07-26T12:19:25 Last Updated: 2024-08-04T23:41:10.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of t
ommon configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.) Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4078-1/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00024.html - https://usn.ubuntu.com/4078-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://support.apple.com/kb/HT210788 - https://www.oracle.com/securit
/www.oracle.com/security-alerts/cpuapr2020.html - https://support.apple.com/kb/HT210788 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365 - https://www.openldap.org/its/?findid=9038 - https://www.openldap.org/lists/openldap-announce/201907/msg00001.html - https://security.netapp.com/advisory/ntap-20190822-0004/
CVE ID: CVE-2019-13063 State: PUBLISHED Published: 2019-09-23T14:56:59 Last Updated: 2024-08-04T23:41:10.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page. This will result in file disclosure (i.e., being able to pull any file from the remote victim application). This can be used to steal and obtain sensitive config and other files. This can result in complete compromise of the application. The script parameter is vulnerable to directory traversal and both local and remote file inclusion. Additional Analyst Notes: - CVE P
rameter is vulnerable to directory traversal and both local and remote file inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://sahipro.com/downloads-archive/ - https://www.exploit-db.com/exploits/47062
CVE ID: CVE-2019-13066 State: PUBLISHED Published: 2019-10-29T17:06:36 Last Updated: 2024-08-04T23:41:10.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, by updating a script's Script Name, Suite Name, Base URL, Android, iOS, Scripts Run, Origin Machine, or Comment field. The sql parameter can be used to trigger reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://sahipro.com/downloads-archive/ - https://packetstormsecurity.com/files/154985/Sahi-Pro-8.x-Cross-Site-Scripting.html
CVE ID: CVE-2019-13067 State: PUBLISHED Published: 2019-06-29T23:29:57 Last Updated: 2024-08-04T23:41:10.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/183
CVE ID: CVE-2019-13068 State: PUBLISHED Published: 2019-06-29T00:00:00 Last Updated: 2024-08-04T23:41:10.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grafana/grafana/issues/17718 - https://github.com/grafana/grafana/releases/tag/v6.2.5 - https://security.netapp.com/advisory/ntap-20190710-0001/ - http://packetstormsecurity.com/files/171500/Grafana-6.2.4-HTML-Injection.html
CVE ID: CVE-2019-13069 State: PUBLISHED Published: 2019-08-17T16:36:14 Last Updated: 2024-08-04T23:41:10.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service. Additional Analyst Notes: - CVE Program Container: References: - https://www.fobz.net/adv/ag47ex/info.html - http://kb.extenua.com
CVE ID: CVE-2019-13070 State: PUBLISHED Published: 2019-07-09T18:05:57 Last Updated: 2024-08-04T23:41:10.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious JavaScript in the SNMP trap receivers form. Upon visiting the /agent/action_recipient Event Action/Recipient page, the embedded code will be executed in the browser of the victim. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyberpowersystems.com/category/advisory-notices/ - https://www.exploit-db.com/exploits/47059
CVE ID: CVE-2019-13071 State: PUBLISHED Published: 2019-07-10T13:46:43 Last Updated: 2024-08-04T23:41:10.387Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Jul/11 - http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cr
clists.org/fulldisclosure/2019/Jul/11 - http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-13072 State: PUBLISHED Published: 2019-06-30T01:03:51 Last Updated: 2024-08-04T23:41:10.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/zoneminder/issues/2642 - https://www.exploit-db.com/exploits/47060
CVE ID: CVE-2019-13074 State: PUBLISHED Published: 2019-07-03T20:07:27 Last Updated: 2024-08-04T23:41:10.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of uncontrolled resource management. Additional Analyst Notes: - CVE Program Container: References: - https://forum.mikrotik.com/viewtopic.php?t=150045 - https://mikrotik.com/download/changelogs/stable-release-tree
CVE ID: CVE-2019-13075 State: PUBLISHED Published: 2019-06-30T13:47:08 Last Updated: 2024-08-04T23:41:10.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68. Additional Analyst Notes: - CVE Program Container: References: - https://trac.torproject.org/projects/tor/ticket/30657 - https://hackerone.com/reports/588239
CVE ID: CVE-2019-13076 State: PUBLISHED Published: 2019-11-06T14:49:36 Last Updated: 2024-08-04T23:41:10.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticket_list.php, and affected parameters are order[0][column] and order[0][dir]. Additional Analyst Notes: - CVE Program Container: References: - https://www.quest.com/products/kace-systems-management-appliance/ - https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
CVE ID: CVE-2019-13077 State: PUBLISHED Published: 2019-11-06T14:50:54 Last Updated: 2024-08-04T23:41:10.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the sam_detail_titled.php SAM_TYPE parameter) that allows an attacker to create a malicious link in order to attack authenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://www.quest.com/products/kace-systems-management-appliance/ - https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
CVE ID: CVE-2019-13078 State: PUBLISHED Published: 2019-11-06T14:52:01 Last Updated: 2024-08-04T23:41:10.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /common/user_profile.php. The affected parameter is sort_column. Additional Analyst Notes: - CVE Program Container: References: - https://www.quest.com/products/kace-systems-management-appliance/ - https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
CVE ID: CVE-2019-13079 State: PUBLISHED Published: 2019-11-06T14:53:02 Last Updated: 2024-08-04T23:41:10.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /adminui/history_log.php. The affected parameter is TYPE_NAME. Additional Analyst Notes: - CVE Program Container: References: - https://www.quest.com/products/kace-systems-management-appliance/ - https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
CVE ID: CVE-2019-13080 State: PUBLISHED Published: 2019-11-06T14:53:54 Last Updated: 2024-08-04T23:41:10.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an SVG image and HTML file) that allows an authenticated user to execute arbitrary JavaScript in an administrator's browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.quest.com/products/kace-systems-management-appliance/ - https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
CVE ID: CVE-2019-13081 State: PUBLISHED Published: 2019-11-06T14:55:00 Last Updated: 2024-08-04T23:41:10.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows an authenticated user to execute arbitrary JavaScript in a service desk user's browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.quest.com/products/kace-systems-management-appliance/ - https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
CVE ID: CVE-2019-13082 State: PUBLISHED Published: 2019-06-30T15:07:27 Last Updated: 2024-08-04T23:41:10.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. It extracts a ZIP archive before checking its content, and once it has been extracted, does not check files in a recursive way. This means that by putting a .php file in a folder and then this folder in a ZIP archive, the server will accept this file without any checks. Because one can access this file from the website, it is remote code execution. This is related to a scorm imsmanifest.xml file, the import_pa
this file from the website, it is remote code execution. This is related to a scorm imsmanifest.xml file, the import_package function, and extraction in $courseSysDir.$newDir. Additional Analyst Notes: - CVE Program Container: References: - https://0xecute.com/?p=32 - https://support.chamilo.org/projects/1/wiki/Security_issues
CVE ID: CVE-2019-13083 State: PUBLISHED Published: 2019-06-30T15:44:52 Last Updated: 2024-08-04T23:41:10.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x384e2a.md
CVE ID: CVE-2019-13084 State: PUBLISHED Published: 2019-06-30T15:45:02 Last Updated: 2024-08-04T23:41:10.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x26b739.md
CVE ID: CVE-2019-13085 State: PUBLISHED Published: 2019-06-30T15:45:09 Last Updated: 2024-08-04T23:41:10.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x30ecfa.md
CVE ID: CVE-2019-13086 State: PUBLISHED Published: 2019-06-30T16:16:02 Last Updated: 2024-08-04T23:41:10.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/19
CVE ID: CVE-2019-13096 State: PUBLISHED Published: 2019-07-22T16:14:26 Last Updated: 2024-08-04T23:41:10.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/shared_prefs/<wallet-name>.xml to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/raw/J9B8Lh0j - https://pastebin.com/raw/08REmV1X
CVE ID: CVE-2019-13097 State: PUBLISHED Published: 2019-07-22T16:01:46 Last Updated: 2024-08-04T23:41:10.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/WkkGk0tw - https://www.youtube.com/watch?v=u5iEeLZnYVg
CVE ID: CVE-2019-13098 State: PUBLISHED Published: 2019-07-22T15:52:59 Last Updated: 2024-08-04T23:41:10.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 (Jelly Bean), the log data is not sandboxed per application; any application installed on the device has the capability to read data logged by other applications. Additional Analyst Notes: - CVE Program Container: References: - https://p
ty to read data logged by other applications. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/a5VhaxYn - https://pastebin.com/raw/rVGbwSw0
CVE ID: CVE-2019-13099 State: PUBLISHED Published: 2019-07-22T15:40:32 Last Updated: 2024-08-04T23:41:10.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/SgVPb7Lb
CVE ID: CVE-2019-13100 State: PUBLISHED Published: 2019-07-22T15:28:10 Last Updated: 2024-08-04T23:41:10.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/shared_prefs/sendanywhere_device.xml. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/Gdd0Shgr
CVE ID: CVE-2019-13101 State: PUBLISHED Published: 2019-08-08T12:29:17 Last Updated: 2024-08-04T23:41:10.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf - https://us.dlink.com/en/security-advisory - https://github.com/d0x0/D-Link-DIR-600M/blob/master
nd_judgment_7-2-19.pdf - https://us.dlink.com/en/security-advisory - https://github.com/d0x0/D-Link-DIR-600M/blob/master/CVE-2019-13101 - http://packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.html - http://seclists.org/fulldisclosure/2019/Aug/5 - https://seclists.org/bugtraq/2019/Aug/17
CVE ID: CVE-2019-13103 State: PUBLISHED Published: 2019-07-29T14:52:02 Last Updated: 2024-08-04T23:41:10.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/commits/master - https://lists.denx.de/pipermail/u-boot/2019-July/375512.html - https://gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75 - https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdf
CVE ID: CVE-2019-13104 State: PUBLISHED Published: 2019-08-06T19:00:41 Last Updated: 2024-08-04T23:41:10.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/commits/master - https://lists.denx.de/pipermail/u-boot/2019-July/375514.html - https://gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00002.html - http:
oo/d91b81a1674b4750e662dfae93804d75 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00004.html