Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1000847 State: PUBLISHED Published: 2018-12-20T15:00:00Z Last Updated: 2024-09-16T19:51:53.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreshDNS version 1.0.3 and prior contains a Cross Site Scripting (XSS) vulnerability in Account data form; Zone editor that can result in Execution of attacker's JavaScript code in victim's session. This attack appear to be exploitable via The attacker stores a specially crafted string as their Full Name in their account details. The victim (e.g. the administrator of the FreshDNS instance) opens the User List in the admin interface.. This vulnerability appears to have been fixed in 1.0.5 and later. Additional Analyst Notes
List in the admin interface.. This vulnerability appears to have been fixed in 1.0.5 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/funzoneq/freshdns/issues/16 - https://github.com/funzoneq/freshdns/pull/6/commits/48b5ca812a89689fd2f32248875cedcba8c9014f
CVE ID: CVE-2018-1000848 State: PUBLISHED Published: 2018-12-20T15:00:00Z Last Updated: 2024-09-16T18:49:10.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in index.php localhost page that can result in very low. This attack appear to be exploitable via payload onmouseover. This vulnerability appears to have been fixed in 3.1.5 and later. Additional Analyst Notes: - CVE Program Container: References: - http://forum.wampserver.com/read.php?2%2C153491
CVE ID: CVE-2018-1000849 State: PUBLISHED Published: 2018-12-20T15:00:00Z Last Updated: 2024-09-17T03:43:56.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data to an attacker-specified file, due to bugs in handling long link target name and the way a regular file is extracted.. This vulnerability appears to have been fixed in 2.6.10, 2.7.6, and 2.10.1. Additional Analyst Notes: - CVE Pr
tracted.. This vulnerability appears to have been fixed in 2.6.10, 2.7.6, and 2.10.1. Additional Analyst Notes: - CVE Program Container: References: - https://justi.cz/security/2018/09/13/alpine-apk-rce.html - https://alpinelinux.org/posts/Alpine-3.8.1-released.html - https://git.alpinelinux.org/cgit/apk-tools/commit/?id=6484ed9849f03971eb48ee1fdc21a2f128247eb1
CVE ID: CVE-2018-1000850 State: PUBLISHED Published: 2018-12-20T15:00:00 Last Updated: 2024-08-05T12:47:57.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack appear to be exploitable via An attacker should have access to an encoded path parameter on POST, PUT or DELETE request.. This vulnerability appears to have been fixed in 2.5.0 and later. Additional Analyst Notes: - CVE Program Con
request.. This vulnerability appears to have been fixed in 2.5.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/square/retrofit/blob/master/CHANGELOG.md - https://github.com/square/retrofit/commit/b9a7f6ad72073ddd40254c0058710e87a073047d#diff-943ec7ed35e68201824904d1dc0ec982 - https://ihacktoprotect.com/post/retrofit-path-traversal/ - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d
a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3892
CVE ID: CVE-2018-1000851 State: PUBLISHED Published: 2018-12-20T15:00:00Z Last Updated: 2024-09-16T23:06:07.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability appears to have been fixed in 5.2.0 and later . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dominictarr/event-stream/issues/116 - https://arstechnica.com/information-technology/2018/11/hacker-b
https://github.com/dominictarr/event-stream/issues/116 - https://arstechnica.com/information-technology/2018/11/hacker-backdoors-widely-used-open-source-software-to-steal-bitcoin/ - https://blog.bitpay.com/npm-package-vulnerability-copay/ - https://github.com/bitpay/copay/issues/9346
CVE ID: CVE-2018-1000852 State: PUBLISHED Published: 2018-12-20T15:00:00 Last Updated: 2024-08-05T12:47:57.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3. Additional Analyst Notes: - CVE Program Containe
ve been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRDP/FreeRDP/pull/4871/commits/baee520e3dd9be6511c45a14c5f5e77784de1471 - https://github.com/FreeRDP/FreeRDP/issues/4866 - https://github.com/FreeRDP/FreeRDP/pull/4871 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YVJKO2DR5EY4C4QZOP7SNNBEW2JW6FHX/ - https://access.redhat.com/errata/RHSA-2019:2157 - https://usn.ubuntu.com/4379-1/
CVE ID: CVE-2018-1000853 State: REJECTED Published: 2018-12-06T17:00:00Z Last Updated: 2024-09-16T19:19:11.143Z Description: No description available.
CVE ID: CVE-2018-1000854 State: PUBLISHED Published: 2018-12-20T16:00:00Z Last Updated: 2024-09-16T19:56:55.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: esigate.org esigate version 5.2 and earlier contains a CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in ESI directive with user specified XSLT that can result in Remote Code Execution. This attack appear to be exploitable via Use of another weakness in backend application to reflect ESI directives. This vulnerability appears to have been fixed in 5.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/esigate/esigate
e been fixed in 5.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/esigate/esigate/issues/209
CVE ID: CVE-2018-1000855 State: PUBLISHED Published: 2018-12-20T16:00:00Z Last Updated: 2024-09-17T04:05:07.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS that affects Firefox. Can be used to steal cookies, depending on the cookie settings.. This attack appear to be exploitable via The victim must click on a crafted URL that contains the XSS payload. This vulnerability appears to have been fixed in 1.4.1 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/basecamp/easymon/pull/2
1 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/basecamp/easymon/pull/25 - https://github.com/basecamp/easymon/issues/26
CVE ID: CVE-2018-1000856 State: PUBLISHED Published: 2018-12-20T16:00:00Z Last Updated: 2024-09-17T02:53:11.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. This attack appear to be exploitable via Victim must visit the vulnerable page. This vulnerability appears to have been fixed in No fix yet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issu
No fix yet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/80
CVE ID: CVE-2018-1000857 State: PUBLISHED Published: 2018-12-20T16:00:00Z Last Updated: 2024-09-16T17:37:37.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in User to root privilege escalation. This attack appear to be exploitable via Malicious unprivileged user executes the vulnerable binary/(remote) environment variable manipulation similar shell-shock also possible. Additional Analyst Notes: - CVE Program Container: References: - https://www.halfdog.net/Security/2018/LogUserSessionLocalRootPrivilegeEscalation/
CVE ID: CVE-2018-1000858 State: PUBLISHED Published: 2018-12-20T16:00:00 Last Updated: 2024-08-05T12:47:57.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS. This attack appear to be exploitable via Victim must perform a WKD request, e.g. enter an email address in the composer window of Thunderbird/Enigmail. This vulnerability appears to have been fixed in after commit 4a4bb874f63741026bd26264c43bb32b1099f060. Additional Analyst Notes: - CVE Program Container: References: - https://sektioneins.de/en/blog/18-1
64c43bb32b1099f060. Additional Analyst Notes: - CVE Program Container: References: - https://sektioneins.de/en/blog/18-11-23-gnupg-wkd.html - https://usn.ubuntu.com/3853-1/ - https://sektioneins.de/en/advisories/advisory-012018-gnupg-wkd.html
CVE ID: CVE-2018-1000859 State: REJECTED Published: 2018-12-06T17:00:00Z Last Updated: 2024-09-16T22:40:38.180Z Description: No description available.
CVE ID: CVE-2018-1000860 State: PUBLISHED Published: 2018-12-20T16:00:00Z Last Updated: 2024-09-17T00:05:30.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page encapsulated in single quotes. Editing the value of the cookie to r5zkh'><script>alert(1)</script>quqtl exploits an XSS vulnerability. that can result in Arbitrary code executes in victims browser.. This attack appear to be exploitable via Needs to be chained with another exploit that allows an attacker to set or modify a cookie for the phpIPAM instanc
e via Needs to be chained with another exploit that allows an attacker to set or modify a cookie for the phpIPAM instance's domain.. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/2338
CVE ID: CVE-2018-1000861 State: PUBLISHED Published: 2018-12-10T14:00:00.000Z Last Updated: 2025-10-21T23:45:46.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jenkins.io/security/advisory/2018-12-05/#SECURITY-595 - https://access.redhat.com/errata/RHBA-2019:00
erences: - https://jenkins.io/security/advisory/2018-12-05/#SECURITY-595 - https://access.redhat.com/errata/RHBA-2019:0024 - http://www.securityfocus.com/bid/106176 - http://packetstormsecurity.com/files/166778/Jenkins-Remote-Code-Execution.html
CVE ID: CVE-2018-1000862 State: PUBLISHED Published: 2018-12-10T14:00:00 Last Updated: 2024-08-05T12:47:57.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the duration of the build using the workspace browser. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-12-05/#SECURITY-904 - https://access.redhat.com/errata/RHBA-2019:0024 - http://www.securityfocus.com/bid/106176
CVE ID: CVE-2018-1000863 State: PUBLISHED Published: 2018-12-10T14:00:00 Last Updated: 2024-08-05T12:47:57.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an improper migration of user record storage formats, potentially preventing the victim from logging into Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-12-05/#SECURITY-1072 - https://access.redhat.com/errata/RHBA-2019:0024 - http://www.securityfocus.com/bid/106176 - h
018-12-05/#SECURITY-1072 - https://access.redhat.com/errata/RHBA-2019:0024 - http://www.securityfocus.com/bid/106176 - https://www.tenable.com/security/research/tra-2018-43
CVE ID: CVE-2018-1000864 State: PUBLISHED Published: 2018-12-10T14:00:00 Last Updated: 2024-08-05T12:47:56.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHBA-2019:0024 - http://www.securityfocus.com/bid/106176 - https://jenkins.io/security/advisory/2018-12-05/#SECURITY-1193
CVE ID: CVE-2018-1000865 State: PUBLISHED Published: 2018-12-10T14:00:00 Last Updated: 2024-08-05T12:47:57.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-10-29/#SECURITY-1186 - https://access.redhat.com/errata/RHBA-2019:0326 - https://access.redhat.com/err
ity/advisory/2018-10-29/#SECURITY-1186 - https://access.redhat.com/errata/RHBA-2019:0326 - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2018-1000866 State: PUBLISHED Published: 2018-12-10T14:00:00 Last Updated: 2024-08-05T12:47:56.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.59 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java, groovy-cps/lib/src/main/java/com/cloudbees/groovy/cps/SandboxCpsTransformer.java that allows attackers with Job/Configure permission, or unauthorized attackers with SCM commit privileges and corresponding pipelines based on Jenkinsfiles set up in Jenkins, to execute arbitrary code on the Jenkins master JVM Additional Analyst Notes: - CVE Program Container: Refe
in Jenkins, to execute arbitrary code on the Jenkins master JVM Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-10-29/#SECURITY-1186 - https://access.redhat.com/errata/RHBA-2019:0326 - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2018-1000867 State: PUBLISHED Published: 2018-12-20T17:00:00Z Last Updated: 2024-09-16T18:43:58.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions*.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f. Additional Analyst Notes: - CVE Program Container: References: - https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txt - http://bugs.webidsupport.com/
/telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txt - http://bugs.webidsupport.com/view.php?id=647 - https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7f
CVE ID: CVE-2018-1000868 State: PUBLISHED Published: 2018-12-20T17:00:00Z Last Updated: 2024-09-16T22:08:51.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeBid version up to current version 1.2.2 contains a Cross Site Scripting (XSS) vulnerability in user_login.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must click a malicous link. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f. Additional Analyst Notes: - CVE Program Container: References: - https://telekomsecurity.github.io/assets
446cc4b449c7f. Additional Analyst Notes: - CVE Program Container: References: - https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txt - http://bugs.webidsupport.com/view.php?id=648 - https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7f
CVE ID: CVE-2018-1000869 State: PUBLISHED Published: 2018-12-20T17:00:00Z Last Updated: 2024-09-16T19:04:36.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to be exploitable via Rough user, exploiting the vulnerability to access information he/she does not have access to.. This vulnerability appears to have been fixed in 1.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/2344 - https://github.com/phpipam/phpipam/commit/856b10ca85a24c04ed8651f4e13f867ec78a353d
CVE ID: CVE-2018-1000870 State: PUBLISHED Published: 2018-12-20T17:00:00Z Last Updated: 2024-09-17T02:32:43.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. Admin(Victim) views user in admin-panel and gets exploited.. This vulnerability appears to have been fixed in 1.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/commit/552fbb0fc7ecb84bda4a131b4f290a3de9980040 - https://github.
iner: References: - https://github.com/phpipam/phpipam/commit/552fbb0fc7ecb84bda4a131b4f290a3de9980040 - https://github.com/phpipam/phpipam/issues/2326
CVE ID: CVE-2018-1000871 State: PUBLISHED Published: 2018-12-20T17:00:00Z Last Updated: 2024-09-17T01:36:10.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in "id_utente_mod" parameter in gestione_utenti.php file that can result in An attacker can dump all the database records of backend webserver. This attack appear to be exploitable via the attack can be done by anyone via specially crafted sql query passed to the "id_utente_mod=1" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45976
CVE ID: CVE-2018-1000872 State: PUBLISHED Published: 2018-12-20T17:00:00Z Last Updated: 2024-09-16T16:12:37.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors (similar issue to CVE-2015-5262) vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear to be exploitable via A client or clients open sockets with the server and then never close them. This vulnerability appears to have been fixed in 0.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://g
rability appears to have been fixed in 0.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenKMIP/PyKMIP/issues/430
CVE ID: CVE-2018-1000873 State: PUBLISHED Published: 2018-12-20T17:00:00 Last Updated: 2024-08-05T12:47:57.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fa
es: - CVE Program Container: References: - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.
ad.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/FasterXML/jackson-modules-java8/pull/87 - https://bugzilla.redhat.com/show_bug.cgi?id=1665601 - https://github.com/FasterXML/jackson-modules-java8/issues/90 - https://security.netap
dhat.com/show_bug.cgi?id=1665601 - https://github.com/FasterXML/jackson-modules-java8/issues/90 - https://security.netapp.com/advisory/ntap-20200904-0004/