biz.aqute.bnd:biz.aqute.bnd.maven (>=4.3.0, <=5.3.0), com.aerse.maven:apt-maven-plugin (>=1.19, <=1.20) +356 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.aqute.bnd:biz.aqute.bnd.maven =4.3.0, =1.19, =1.0, =2.0.0, =1.4.3, =1.4.3, =1.11.0, =1.11.0...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +298 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - app.keyconnect.api:keyconnect-api 1.0.0 - app.keyconnect:keyconnect-rippled-api 1.0.0 -...

com.browserstack:browserstack-java-sdk (>=1.0.1, <=1.0.6), com.eclipsesource.tycho.karaf.bridge:kar-packager (>=0.2.0, <=0.6.0) +11 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.10)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.browserstack:browserstack-java-sdk =1.0.1, =0.2.0, =0.9, =0.1, =0.2.1, =0.6.1, =2.2, =1.16...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2022-4245 Source advisory...

com.atlassian.maven.plugins:maven-clover2-plugin (>=2.3.1, <=2.4.2), com.intel.analytics.bigdl.core.dist:all (>=0.4.0, <=0.13.0) +192 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.atlassian.maven.plugins:maven-clover2-plugin =2.3.1, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0...

org.ow2.util.maven:maven-deploymentplan-plugin (>=1.0.34, <=1.0.37), org.ow2.util.maven:maven-jbuilding-plugin (>=1.0.1, <=1.0.37) +7 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.ow2.util.maven:maven-deploymentplan-plugin =1.0.34, =1.0.1, =1.0.31, =1.0.13, =1.0.13,...

br.com.ingenieux.launchify:launchify-core (0.0.1), br.com.ingenieux.launchify:launchify-hashdot (0.0.1) +559 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - br.com.ingenieux.launchify:launchify-core 0.0.1 - br.com.ingenieux.launchify:launchify-hashdot...

com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin (>=1.5.2, <=1.6.40), com.anaptecs.jeaf.generator:jeaf-generator-test-message-constants (>=1.5.13, <=1.6.40) +146 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin =1.5.2, =1.5.13, =4.1.1, =3.1.12, =1.0,...

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

UBUNTU-CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2022-4245

CVE-2022-4245 concerns a flaw in codehaus-plexus where, in XmlWriterUtil, the method writeComment fails to sanitize a --&gt; sequence. This allows text in a command string to be interpreted as XML, enabling XML injection. The available connected documents consistently describe this vulnerability...

CVE-2022-4245 Codehaus-plexus: xml external entity (xxe) injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2022-4245 Codehaus-plexus: xml external entity (xxe) injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2023-4245

creationtimestamp| type| source ---|---|--- 2023-08-31 12:12:50+00:00| seen| https://t.me/cibsecurity/69515...

CVE-2023-4245

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the GetInvoiceDetail function in versions up to, and including, 1.2.89. This makes it possible for subscribers to view arbitrary invoices provided they can guess the...

CVE-2023-4245

The CVE-2023-4245 issue affects the WooCommerce PDF Invoice Builder for WordPress (versions up to 1.2.89). Root cause: missing capability check in GetInvoiceDetail, enabling unauthorized access to invoices by subscribers who can guess order and invoice IDs. Impact stated in sources is unauthorize...

WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.91 is vulnerable to Broken Access Control

Software WooCommerce PDF Invoice Builder Type Plugin Vulnerable versions = 1.2.91 Fixed in 1.2.92 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-4245 Patch priority Low CVSS severity Low 4.3 Developer Edgar Rojas PSID f1eb4f613ca1 Credits Marco Wotschka...

SUSE CVE-2016-4245

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...