Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10552 State: PUBLISHED Published: 2021-02-05T19:24:48 Last Updated: 2024-08-04T11:06:09.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2020-002-psyprax
CVE ID: CVE-2020-10553 State: PUBLISHED Published: 2021-02-05T19:23:06 Last Updated: 2024-08-04T11:06:09.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen (aka screensaver) of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify that file. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2020-002-psyprax
CVE ID: CVE-2020-10554 State: PUBLISHED Published: 2021-02-05T19:20:15 Last Updated: 2024-08-04T11:06:09.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored in the database in an obfuscated format, which can be easily reverted. For example, the password AAAAAAAA is stored in the database as MMMMMMMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2020-002-psyprax
CVE ID: CVE-2020-10557 State: PUBLISHED Published: 2020-03-16T14:31:09 Last Updated: 2024-08-04T11:06:09.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/acontent/ - https://github.com/cinzinga/CVEs/tree/master/CVE-2020-10557
CVE ID: CVE-2020-10558 State: PUBLISHED Published: 2020-03-20T18:12:39 Last Updated: 2024-08-04T11:06:09.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, along with other miscellaneous functions from the main screen. Additional Analyst Notes: - CVE Program Container: References: - https://safekeepsecurity.com/about/cve-2020-10558/ - https://cylect.io/blog/Tesla_Model_3_Vuln/
CVE ID: CVE-2020-10560 State: PUBLISHED Published: 2020-03-30T12:04:45 Last Updated: 2024-08-04T11:06:09.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php. Additional Analyst Notes: - CVE Program Container: References: - https://techanarchy.net/blog/cve-2020-10560-ossn-a
php. Additional Analyst Notes: - CVE Program Container: References: - https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read - https://github.com/LucidUnicorn/CVE-2020-10560-Key-Recovery
CVE ID: CVE-2020-10561 State: PUBLISHED Published: 2020-06-24T16:31:49 Last Updated: 2024-08-04T11:06:09.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=13
CVE ID: CVE-2020-10562 State: PUBLISHED Published: 2020-03-13T20:47:56 Last Updated: 2024-08-04T11:06:09.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JeromeDevome/GRR/releases/tag/v3.4.1c - https://github.com/JeromeDevome/GRR/commit/2c6edacd9e15c75a0c2ef472470481ffb6edc7d8 - https://github.com/skr0x/CVE/tree/master/CVE-2020-10562
CVE ID: CVE-2020-10563 State: PUBLISHED Published: 2020-03-13T20:47:46 Last Updated: 2024-08-04T11:06:09.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JeromeDevome/GRR/releases/tag/v3.4.1c - https://github.com/JeromeDevome/GRR/commit/2c6edacd9e15c75a0c2ef472470481ffb6edc7d8 - https://cvecps.mitre.org/cps/workitems/create/?cveId=CVE-2020-10563
CVE ID: CVE-2020-10564 State: PUBLISHED Published: 2020-03-13T22:07:09 Last Updated: 2024-08-04T11:06:09.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-file-upload/#developers - https://github.com/beerpwn/CVE/tree/master/WP-File-Upload_disclosure_report/ - https://wpvulndb.com/vulnerabilities/10132
CVE ID: CVE-2020-10565 State: PUBLISHED Published: 2020-03-14T00:53:02 Last Updated: 2024-08-04T11:06:09.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or write_*) by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhyve process, resulting in code execution as root on the host OS. Additional Analyst Notes: - CVE Program Container: References: - https://svnweb.freebsd.org/ports?view=revision&revision=525916
CVE ID: CVE-2020-10566 State: PUBLISHED Published: 2020-03-14T00:52:53 Last Updated: 2024-08-04T11:06:09.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://svnweb.freebsd.org/ports?view=revision&revision=525916
CVE ID: CVE-2020-10567 State: PUBLISHED Published: 2020-03-14T00:00:00 Last Updated: 2024-08-04T11:06:09.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains this code in the EXIF data, and the .php extension is used in the name parameter. (A potential fast patch is to disable the save_img action in the config file.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trippo/Res
tion in the config file.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trippo/ResponsiveFilemanager/issues/600 - http://packetstormsecurity.com/files/171280/ZwiiCMS-12.2.04-Remote-Code-Execution.html
CVE ID: CVE-2020-10568 State: PUBLISHED Published: 2020-03-14T13:50:04 Last Updated: 2024-08-04T11:06:09.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers to strings. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10131 - https://medium.com/%40arall/sitepress-multilingual-cms-wplugin-wpml-4-3-7-b-2-9c9486c13577
CVE ID: CVE-2020-10569 State: PUBLISHED Published: 2020-04-21T19:01:37 Last Updated: 2024-11-18T17:46:46.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate of CVE-2020-1938 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/157314/Sysaid-20.1.11-b26-Remote-Command-Execution.html - https://www.sysaid.com/product/on
acketstormsecurity.com/files/157314/Sysaid-20.1.11-b26-Remote-Command-Execution.html - https://www.sysaid.com/product/on-premise/20-2/release-notes
CVE ID: CVE-2020-10570 State: PUBLISHED Published: 2020-03-24T13:56:47 Last Updated: 2024-08-04T11:06:09.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VijayT007/Vulnerability-Database/blob/master/Telegram:CVE-2020-10570
CVE ID: CVE-2020-10571 State: PUBLISHED Published: 2020-03-14T17:23:28 Last Updated: 2024-08-04T11:06:09.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/psd-tools/psd-tools/pull/198 - https://github.com/psd-tools/psd-tools/releases/tag/v1.9.4
CVE ID: CVE-2020-10573 State: PUBLISHED Published: 2020-03-14T19:07:37 Last Updated: 2024-08-04T11:06:09.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/pull/1988
CVE ID: CVE-2020-10574 State: PUBLISHED Published: 2020-03-14T19:07:26 Last Updated: 2024-08-04T11:06:09.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/pull/1989
CVE ID: CVE-2020-10575 State: PUBLISHED Published: 2020-03-14T19:06:58 Last Updated: 2024-08-04T11:06:09.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early or too many times. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/pull/1994
CVE ID: CVE-2020-10576 State: PUBLISHED Published: 2020-03-14T19:07:20 Last Updated: 2024-08-04T11:06:09.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition that could cause a server crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/pull/1993
CVE ID: CVE-2020-10577 State: PUBLISHED Published: 2020-03-14T19:07:13 Last Updated: 2024-08-04T11:06:09.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/pull/1990
CVE ID: CVE-2020-10578 State: PUBLISHED Published: 2020-03-14T19:30:40 Last Updated: 2024-08-04T11:06:10.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/yalecaltech/article/details/104789626
CVE ID: CVE-2020-10579 State: PUBLISHED Published: 2021-03-25T19:48:45 Last Updated: 2024-08-04T11:06:09.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to list the content of arbitrary server directories accessible to the user running the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.on-x.com/sites/default/files/security_advisory_-_multiple_vulnerabilities_-_invigo_adm.pdf
CVE ID: CVE-2020-10580 State: PUBLISHED Published: 2021-03-25T19:48:33 Last Updated: 2024-08-04T11:06:10.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrary PHP code on the server as the user running the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.on-x.com/sites/default/files/security_advisory_-_multiple_vulnerabilities_-_invigo_adm.pdf - https://cwe.mitre.org/data/definitions/77.html
CVE ID: CVE-2020-10581 State: PUBLISHED Published: 2021-03-25T19:48:00 Last Updated: 2024-08-04T11:06:09.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (ADM) through 5.0 allow remote attackers to read potentially sensitive data hosted by the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.on-x.com/sites/default/files/security_advisory_-_multiple_vulnerabilities_-_invigo_adm.pdf
CVE ID: CVE-2020-10582 State: PUBLISHED Published: 2021-03-25T19:47:40 Last Updated: 2024-08-04T11:06:09.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to execute arbitrary SQL requests (including data reading and modification) on the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.on-x.com/sites/default/files/security_advisory_-_multiple_vulnerabilities_-_invigo_adm.pdf
CVE ID: CVE-2020-10583 State: PUBLISHED Published: 2021-03-25T19:47:30 Last Updated: 2024-08-04T11:06:09.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrary OS commands on the server as the user running the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.on-x.com/sites/default/files/security_advisory_-_multiple_vulnerabilities_-_invigo_adm.pdf
CVE ID: CVE-2020-10584 State: PUBLISHED Published: 2021-03-25T19:47:17 Last Updated: 2024-08-04T11:06:10.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to read arbitrary server files accessible to the user running the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.on-x.com/sites/default/files/security_advisory_-_multiple_vulnerabilities_-_invigo_adm.pdf
CVE ID: CVE-2020-10587 State: PUBLISHED Published: 2020-03-14T21:47:51 Last Updated: 2024-08-04T11:06:10.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/bash-c/d2055b5047e56a0b49c95b461347c619#file-antix-exp-sh - https://gist.github.com/bash-c/d2055b5047e56a0b49c95b461347c619#file-mx-exp-sh
CVE ID: CVE-2020-10588 State: PUBLISHED Published: 2020-03-15T20:25:10 Last Updated: 2024-08-04T11:06:10.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged user but execute as root via Sudo. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/bash-c/6ac238e8b15e60c9105e8cb6b42ec43c#file-v2rayl-lpe-exp1-sh
CVE ID: CVE-2020-10589 State: PUBLISHED Published: 2020-03-15T20:25:36 Last Updated: 2024-08-04T11:06:09.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is restarted via Sudo. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/bash-c/6ac238e8b15e60c9105e8cb6b42ec43c#file-v2rayl-lpe-exp2-sh
CVE ID: CVE-2020-10590 State: PUBLISHED Published: 2021-07-28T11:38:46 Last Updated: 2024-08-04T11:06:10.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console. Additional Analyst Notes: - CVE Program Container: References: - https://blog.replicated.com - https://gradle.com/enterprise/releases/2019.5/#changes - https://www.replicated.com/security/advisories/CVE-2020-10
om - https://gradle.com/enterprise/releases/2019.5/#changes - https://www.replicated.com/security/advisories/CVE-2020-10590
CVE ID: CVE-2020-10591 State: PUBLISHED Published: 2020-03-15T20:48:17 Last Updated: 2024-08-04T11:06:10.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via api/v1/apikey. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/walmartlabs/concord/issues/22 - https://github.com/walmartlabs/concord/compare/1.43.0...1.44.0
CVE ID: CVE-2020-10592 State: PUBLISHED Published: 2020-03-23T12:16:48 Last Updated: 2024-08-04T11:06:10.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002. Additional Analyst Notes: - CVE Program Container: References: - https://trac.torproject.org/projects/tor/ticket/33120 - https://security.gentoo.org/glsa/202003-50 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00045.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00052.html
CVE ID: CVE-2020-10593 State: PUBLISHED Published: 2020-03-23T12:22:03 Last Updated: 2024-08-04T11:06:10.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit. Additional Analyst Notes: - CVE Program Container: References: - https://trac.torproject.org/projects/tor/ticket/33619 - https://security.gentoo.org/glsa/202003-50 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00045.html - http:/
security.gentoo.org/glsa/202003-50 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00045.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00052.html
CVE ID: CVE-2020-10594 State: PUBLISHED Published: 2020-03-15T21:22:09 Last Updated: 2024-08-04T11:06:09.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refresh feature. NOTE: drf-jwt is a fork of jpadilla/django-rest-framework-jwt, which is unmaintained. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Styria-Digital/django-rest-framework-jwt/issues/36 - https://pypi.org/project/drf-jwt/1.15
erences: - https://github.com/Styria-Digital/django-rest-framework-jwt/issues/36 - https://pypi.org/project/drf-jwt/1.15.1/#history - https://github.com/jpadilla/django-rest-framework-jwt/issues/484
CVE ID: CVE-2020-10595 State: PUBLISHED Published: 2020-03-31T12:36:10 Last Updated: 2024-08-04T11:06:09.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may overflow a buffer provided by the underlying Kerberos library by a single '\0' byte if an attacker responds to a prompt with an answer of a carefully chosen length. The effect may range from heap corruption to stack corruption depending on the structure of the underlying Kerberos library, with unknown effects but possibly including code execution. This code path is not u
of the underlying Kerberos library, with unknown effects but possibly including code execution. This code path is not used for normal authentication, but only when the Kerberos library does supplemental prompting, such as with PKINIT or when using the non-standard no_prompt PAM configuration option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rra/pam-krb5/commit/e7879e27a37119fad4faf133a9f70bdcdc75d760 - http://www.openwall.com/lists/oss-security/2020/03/31/1 - https://www.debian.org/security/2020/dsa-4648 - https://lists.debian.org/debian-lts-announce/2020/04/msg00000.html - https://usn.ubuntu.com/4314-1/ - https://www.eyrie.org/~eagle/software/pam-k
debian-lts-announce/2020/04/msg00000.html - https://usn.ubuntu.com/4314-1/ - https://www.eyrie.org/~eagle/software/pam-krb5/security/2020-03-30.html