Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-24889 State: PUBLISHED Published: 2020-09-16T14:55:44 Last Updated: 2024-08-04T15:19:09.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/issues/334 - https://security.gentoo.org/glsa/202010-05
CVE ID: CVE-2020-24890 State: PUBLISHED Published: 2020-09-16T14:39:49 Last Updated: 2024-08-04T15:19:09.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/issues/335 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWHUZCRMGOC3QS6C65KWBM6ZJM25V6HI/ - https://security.gentoo.org/glsa/202010-
-announce%40lists.fedoraproject.org/message/EWHUZCRMGOC3QS6C65KWBM6ZJM25V6HI/ - https://security.gentoo.org/glsa/202010-05
CVE ID: CVE-2020-24891 State: REJECTED Published: 2020-09-16T14:08:55 Last Updated: 2020-09-16T18:24:18 Description: No description available.
CVE ID: CVE-2020-24897 State: PUBLISHED Published: 2020-08-29T19:57:29 Last Updated: 2024-08-04T15:19:09.406Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) through the provided Markdown markup to the "Table from CSV" macro. Additional Analyst Notes: - CVE Program Container: References: - https://stiltsoft.atlassian.net/browse/VD-2
CVE ID: CVE-2020-24898 State: PUBLISHED Published: 2020-08-29T19:57:07 Last Updated: 2024-08-04T15:19:09.427Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the "Table from CSV" macro (URL parameter). Additional Analyst Notes: - CVE Program Container: References: - https://stiltsoft.atlassian.net/browse/VD-1
CVE ID: CVE-2020-24899 State: PUBLISHED Published: 2021-02-15T17:39:35 Last Updated: 2024-08-04T15:19:09.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional commands into normal webapp query. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/08/postauth-rce-in-nagios-572.html
CVE ID: CVE-2020-24900 State: PUBLISHED Published: 2021-01-07T12:43:36 Last Updated: 2024-08-04T15:19:09.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/159477/Krpano-Panorama-Viewer-1.20.8-Cross-Site-Scripting.html
CVE ID: CVE-2020-24901 State: PUBLISHED Published: 2021-01-07T12:43:54.000Z Last Updated: 2025-04-03T14:18:29.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/159477/Krpano-Panorama-Viewer-1.20.8-Cross-Site-Scripting.html
CVE ID: CVE-2020-24902 State: PUBLISHED Published: 2021-01-07T12:44:13 Last Updated: 2024-08-04T15:19:09.350Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Quixplorer <=2.4.1 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Not
acker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://dl.packetstormsecurity.net/1804-exploits/quixplorer241beta-xss.txt
CVE ID: CVE-2020-24903 State: PUBLISHED Published: 2021-01-07T12:44:31 Last Updated: 2024-08-04T15:19:09.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/
based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2016/Mar/104
CVE ID: CVE-2020-24904 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T20:09:02.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/davesteele/gnome-gmail/issues/84
CVE ID: CVE-2020-24908 State: PUBLISHED Published: 2021-02-19T05:03:07 Last Updated: 2024-08-04T15:19:09.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory. Additional Analyst Notes: - CVE Program Container: References: - https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt
CVE ID: CVE-2020-24912 State: PUBLISHED Published: 2021-03-04T12:30:24 Last Updated: 2024-08-04T15:19:09.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. Additional Analyst Notes: - CVE Program Container: References: - http://qcubed.com - https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-03 - https://tech.feedyourhead.at/content/QCubed-Cross-Site-Scripting-CVE-2020-24912 - http://seclists.org/fulldisclosure/2021/Mar/30
CVE ID: CVE-2020-24913 State: PUBLISHED Published: 2021-03-04T12:31:47 Last Updated: 2024-08-04T15:26:08.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://qcubed.com - https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-02 - https://tech.feedyourhead.at/content/QCubed-SQL-Injection-CVE-2020-24913 - http://seclists.org/fulldisclosure/2021/Mar/30 - http:
ech.feedyourhead.at/content/QCubed-SQL-Injection-CVE-2020-24913 - http://seclists.org/fulldisclosure/2021/Mar/30 - http://seclists.org/fulldisclosure/2021/Mar/29
CVE ID: CVE-2020-24914 State: PUBLISHED Published: 2021-03-04T12:33:26 Last Updated: 2024-08-04T15:26:09.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://qcubed.com - https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-01 - https://tech.feedyourhead.at/content/QCubed-PHP-Object-Injection-CVE-2020-24914 - http://seclists.org/fulldisclosu
-01 - https://tech.feedyourhead.at/content/QCubed-PHP-Object-Injection-CVE-2020-24914 - http://seclists.org/fulldisclosure/2021/Mar/28
CVE ID: CVE-2020-24916 State: PUBLISHED Published: 2020-09-09T18:10:25 Last Updated: 2024-08-04T15:26:07.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erlyaws/yaws/commits/master - https://packetstormsecurity.com/files/159106/Yaws-2.0.7-XML-Injection-Command-Injection.html - https://vuln.be/post/yaws-xxe-and-shell-injections/ - https://github.com/vulnbe/poc-yaws-cgi-shell-injection - https://lists.debian.org/debian-lts-announce/2020/09/msg00022.html - https://usn.ubuntu.com/4569-1/ - https://w
ection - https://lists.debian.org/debian-lts-announce/2020/09/msg00022.html - https://usn.ubuntu.com/4569-1/ - https://www.debian.org/security/2020/dsa-4773
CVE ID: CVE-2020-24917 State: PUBLISHED Published: 2020-08-30T15:45:41 Last Updated: 2024-08-04T15:26:07.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/commit/518de223933eab0c5558741ce317f36958ef193d - https://github.com/osTicket/osTicket/compare/v1.14.2...v1.14.3 - https://sisl.lab.uic.edu/projects/chess/osticket-xss/
CVE ID: CVE-2020-24918 State: PUBLISHED Published: 2021-04-30T11:44:02 Last Updated: 2024-09-06T14:59:59.824718 Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parse_authentication_header() in libamprotocol-rtsp.so.1 in rtsp_svc (or cause a crash). This allows remote takeover of a Furbo Dog Camera, for example. NOTE: The vendor states that the RTSP library is used for DEMO only, using it in product is a customer's behavior. Ambarella has emphasized that RTSP is DE
SP library is used for DEMO only, using it in product is a customer's behavior. Ambarella has emphasized that RTSP is DEMO only library, should NOT be used in product in our document. Because Ambarella's SDK is proprietary, we didn't publish our SDK source code in public network. Additional Analyst Notes: - CVE Program Container: References: - https://www.somersetrecon.com/blog - https://www.ambarella.com - https://somersetrecon.squarespace.com/blog/2021/hacking-the-furbo-part-1 - https://github.com/Ambarella-Inc/amba-cve-info/tree/main/cve-2020-24918
CVE ID: CVE-2020-24922 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T19:56:49.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuxueli/xxl-job/issues/1921
CVE ID: CVE-2020-24924 State: PUBLISHED Published: 2020-09-15T12:50:40 Last Updated: 2024-08-04T15:26:08.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an attacker can steal the user session cookie using this vulnerability present on Policies >> action >> Name Parameter Additional Analyst Notes: - CVE Program Container: References: - https://www.elkarbackup.org/ - https://vyshnavvizz.blogspot.com/2020/09/stored-cross-site-scripting-in.html - https://github.com/sooraj24/new/blob/master/XSS%20in%20ElkarBackup
CVE ID: CVE-2020-24925 State: PUBLISHED Published: 2020-09-15T12:52:29 Last Updated: 2024-08-04T15:26:09.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure /app/elkarbackup/src/Binovo/ElkarBackupBundle/Controller/DefaultController.php Additional Analyst Notes: - CVE Program Container: References: - https://www.elkarbackup.org/ - https://vyshnavvizz.blogspot.com/2020/09/sensitive-information-disclosure-source.html
CVE ID: CVE-2020-24928 State: PUBLISHED Published: 2020-08-29T19:35:40 Last Updated: 2024-08-04T15:26:08.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origins, which allows attackers to obtain sensitive Discord user information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PreMiD/PreMiD/pull/501
CVE ID: CVE-2020-24930 State: PUBLISHED Published: 2021-09-27T20:47:51 Last Updated: 2024-08-04T15:26:07.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five fingers CMS backend in***.php file has arbitrary file deletion vulnerability. Attackers can use vulnerabilities to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/191 - https://www.cnvd.org.cn/flaw/show/2394661
CVE ID: CVE-2020-24932 State: PUBLISHED Published: 2021-10-27T13:57:02 Last Updated: 2024-08-04T15:26:07.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48758
CVE ID: CVE-2020-24939 State: PUBLISHED Published: 2021-06-16T15:52:02 Last Updated: 2024-08-04T15:26:07.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/959987 - https://github.com/stampit-org/supermixer/issues/9 - https://github.com/stampit-org/supermixer/compare/v1.0.4...v1.0.5 - https://cwe.mitre.org/data/definitions/1321.html
CVE ID: CVE-2020-24940 State: PUBLISHED Published: 2020-09-04T01:28:09 Last Updated: 2024-08-04T15:26:08.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment. Additional Analyst Notes: - CVE Program Container: References: - https://blog.laravel.com/security-release-laravel-61834-7232
CVE ID: CVE-2020-24941 State: PUBLISHED Published: 2020-09-04T01:27:50 Last Updated: 2024-08-04T15:26:09.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.laravel.com/security-release-laravel-61835-7240
CVE ID: CVE-2020-24944 State: PUBLISHED Published: 2021-02-08T20:13:35 Last Updated: 2024-08-04T15:26:09.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/private-octopus/picoquic/issues/969
CVE ID: CVE-2020-24948 State: PUBLISHED Published: 2020-09-03T14:06:10 Last Updated: 2024-08-04T15:26:08.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege users to upload arbitrary files, such as PHP, leading to remote command execution. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10372 - http://packetstormsecurity.com/files/160850/WordPress-Autoptimize-Shell-Upload.html
CVE ID: CVE-2020-24949 State: PUBLISHED Published: 2020-09-03T13:51:12 Last Updated: 2024-08-04T15:26:08.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php-fusion/PHP-Fusion/issues/2312 - http://packetstormsecurity.com/files/162852/PHPFusion-9.03.50-Remote-Code-Execution.html
CVE ID: CVE-2020-24950 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T19:56:03.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function list_items. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/daylightstudio/FUEL-CMS/issues/562
CVE ID: CVE-2020-24955 State: PUBLISHED Published: 2020-09-01T21:40:58 Last Updated: 2024-08-04T15:26:08.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as malware. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=jdcqbev-H5I - https://github.com/b1nary0x1
CVE ID: CVE-2020-24963 State: PUBLISHED Published: 2020-09-04T15:47:32 Last Updated: 2024-08-04T15:26:08.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40ex.mi/php-best-support-system-v3-0-4-authenticated-persistent-xss-dfe6d4a06f75 - https://ex-mi.ru/exploit/%5B2020-08-23%5D-%5BPHP%5D-best-support-system-v3.0.4.txt
CVE ID: CVE-2020-24972 State: PUBLISHED Published: 2020-08-29T20:40:19 Last Updated: 2024-08-04T15:26:09.330Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL. Additional Analyst Notes: - CVE Program Container: References: - https://dev.gnupg.org/rKLEOPATRAb4bd63c1739900d94c04da03045e9445a5a5f54b - https://dev.gnupg.org/source/
: References: - https://dev.gnupg.org/rKLEOPATRAb4bd63c1739900d94c04da03045e9445a5a5f54b - https://dev.gnupg.org/source/kleo/browse/master/CMakeLists.txt - https://security.gentoo.org/glsa/202008-21 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IRIPL72WMXTVWS2M7WYV5SNPETYJ2YI7/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00053.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00064.html
CVE ID: CVE-2020-24977 State: PUBLISHED Published: 2020-09-03T23:20:35 Last Updated: 2024-08-04T15:26:08.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/libxml2/-/issues/178 - https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00036.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
/2020-09/msg00036.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NQ5GTDYOVH26PBCPYXXMGW5ZZXWMGZC/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00061.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3IQ7OQXBKWD3YP7HO6KCNOMLE5ZO2IR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7MEWYKIKMV2SKMGH4IDWVU3ZGJXBCPQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KQXOHIE3MNY3VQXEN7LDQUJNIHOVHAW/ - https://lists.fedoraproject.org/archives/list/package-announce%40l
oject.org/message/7KQXOHIE3MNY3VQXEN7LDQUJNIHOVHAW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCHXIWR5DHYO3RSO7RAHEC6VJKXD2EH2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3ICASXZI2UQYFJAOQWHSTNWGED3VXOE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENEHQIBMSI6TZVS35Y6I4FCTYUQDLJVP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RIQAMBA2IJUTQG5VOP5LZVIZRNCKXHEQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KTUAGDLEHTH6HU66
EQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KTUAGDLEHTH6HU66HBFAFTSQ3OKRAN3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/674LQPJO2P2XTBTREFR5LOZMBTZ4PZAY/ - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - https://security.gentoo.org/glsa/202107-05 - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20200924-0001/ - https://security.netapp.com/advisory/ntap-20200924-0001/ - https://gitlab.gnome.org/GNOME/libxml2/-/commit/50f06b3efb638efb0abd95dc62dca05ae67
p.com/advisory/ntap-20200924-0001/ - https://gitlab.gnome.org/GNOME/libxml2/-/commit/50f06b3efb638efb0abd95dc62dca05ae67882c2 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html