WordPress plugin Assembly 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...

Fedora: Security Advisory for maven-assembly-plugin (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.apache.maven.plugins:maven-assembly-plugin (2.5), org.codehaus.mojo:rpm-maven-plugin (>=2.1, <=2.1.1) potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.8)

org.codehaus.plexus:plexus-archiver MAVEN version 2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-assembly-plugin 2.5 - org.codehaus.mojo:rpm-maven-plugin =2....

org.apache.geronimo.devtools:maven-eclipsepde-plugin (>=1.0, <=1.2), org.apache.maven.plugins:maven-assembly-plugin (2.2-beta-1) +12 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-8)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.geronimo.devtools:maven-eclipsepde-plugin =1.0, =2.0-alpha-6,...

com.github.jlgrock.javascript-framework:source-archive-maven-plugin (>=1.10.3, <=1.18.3), com.savage7.maven.plugins:maven-external-dependency-plugin (0.5) +2 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.1)

org.codehaus.plexus:plexus-archiver MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.github.jlgrock.javascript-framework:source-archive-maven-plugin =1.10.3, =2.2, =2.0.7,...

au.net.causal.maven.plugins:docker-image-archive-maven-plugin (1.0), com.google.code.play2-maven-plugin:play2-maven-plugin (1.0.0-alpha9) +3 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.8.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - au.net.causal.maven.plugins:docker-image-archive-maven-plugin 1.0 -...

net.sourceforge.maven-taglib:maven-taglib-plugin (>=2.3, <=2.3.1), org.apache.maven.plugins:maven-assembly-plugin (2.1) +4 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-6)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - net.sourceforge.maven-taglib:maven-taglib-plugin =2.3, =2.0.5, =1.0-alpha-3,...

org.apache.maven.plugins:maven-assembly-plugin (2.5.2) potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.8.4)

org.codehaus.plexus:plexus-archiver MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-assembly-plugin 2.5.2 Source cves: CVE-2023-37460 Source...

au.net.causal.maven.plugins:docker-image-archive-maven-plugin (1.0), com.google.code.play2-maven-plugin:play2-maven-plugin (1.0.0-alpha9) +3 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.8.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - au.net.causal.maven.plugins:docker-image-archive-maven-plugin 1.0 -...

org.apache.maven.plugins:maven-assembly-plugin (2.5.2) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.8.4)

org.codehaus.plexus:plexus-archiver MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-assembly-plugin 2.5.2 Source cves: CVE-2018-1002200 Source...

com.agilejava.docbkx:docbkx-maven-base (>=2.0.6, <=2.0.17), com.agilejava.docbkx:docbkx-maven-plugin (>=2.0.6, <=2.0.17) +21 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (1.0-alpha-5)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.agilejava.docbkx:docbkx-maven-base =2.0.6, =2.0.6, =1.0-alpha-4, =1.0-alpha-4,...

org.apache.maven.plugins:maven-assembly-plugin (2.5.5), org.apache.maven.plugins:maven-ejb-plugin (2.5.1) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-assembly-plugin 2.5.5 -...

org.apache.geronimo.devtools:maven-eclipsepde-plugin (>=1.0, <=1.2), org.apache.maven.plugins:maven-assembly-plugin (2.2-beta-1) +12 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (1.0-alpha-8)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.geronimo.devtools:maven-eclipsepde-plugin =1.0, =2.0-alpha-6,...

com.google.cloud:gcloud-java-examples (>=0.2.5, <=0.2.8), com.google.cloud:gcloud-java-nio-examples (>=0.2.5, <=0.2.8) +4 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.cloud:gcloud-java-examples =0.2.5, =0.2.5, =0.3.0, =0.3.0, =0.13.0-alpha -...