431 matches found
de.dagere.kopeme:build-tools (1.0), info.novatec.ita:stereotype.check.plugin (>=2.0.3, <=2.0.5) +1 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.5)
com.puppycrawl.tools:checkstyle MAVEN version 6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - de.dagere.kopeme:build-tools 1.0 - info.novatec.ita:stereotype.check.plugin =2.0.3, =9.0.5, =9.0.6...
com.qulice:qulice-ant (0.12.1), com.qulice:qulice-checkstyle (0.12.1) +1 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (5.9)
com.puppycrawl.tools:checkstyle MAVEN version 5.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.qulice:qulice-ant 0.12.1 - com.qulice:qulice-checkstyle 0.12.1 - com.qulice:qulice-maven-plugin...
org.xwiki.commons:xwiki-commons-tool-verification-resources (>=8.1-milestone-1, <=8.1-milestone-2) potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.17)
com.puppycrawl.tools:checkstyle MAVEN version 6.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.xwiki.commons:xwiki-commons-tool-verification-resources =8.1-milestone-1, =8.1-milestone-2...
net.anshulverma.gradle:estilo (>=0.0.1, <=0.0.2), net.anshulverma.gradle:gradle-estilo-plugin (>=0.0.3, <=0.4.5) +2 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.7)
com.puppycrawl.tools:checkstyle MAVEN version 6.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - net.anshulverma.gradle:estilo =0.0.1, =0.0.3, =7.1-rc-1, =7.3-milestone-1 Source cves: CVE-2019-107...
io.shulie:custom-maven-checkstyle (>=1.0.0, <=1.0.2), org.stoyicker.android-check:org.stoyicker.android-check.gradle.plugin (>=2.50.1, <=2.146.1) +1 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (7.3)
com.puppycrawl.tools:checkstyle MAVEN version 7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - io.shulie:custom-maven-checkstyle =1.0.0, =2.50.1, =2.50.1, =2.146.1 Source cves: CVE-2019-10782...
com.github.bmaggi:checkstyle-requirejavadoctag (>=0.1.1, <=0.1.2), com.github.sevntu-checkstyle:sevntu-checks (>=1.24.1, <=1.25.0) +8 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (7.6)
com.puppycrawl.tools:checkstyle MAVEN version 7.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.github.bmaggi:checkstyle-requirejavadoctag =0.1.1, =1.24.1, =1.24.1, =1.24.1, =1.24.1,...
org.testifyproject.buildtools:coding-conventions (0.9.1), org.xwiki.commons:xwiki-commons-tool-verification-resources (>=9.0-rc-1, <=9.0) potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (7.4)
com.puppycrawl.tools:checkstyle MAVEN version 7.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.testifyproject.buildtools:coding-conventions 0.9.1 -...
com.github.cycladessoa.nyxlets:admin (>=1.0.0.1, <=1.0.0.31), com.github.cycladessoa.nyxlets:exec (>=1.0.0.1, <=1.0.0.14) +15 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (5.5)
com.puppycrawl.tools:checkstyle MAVEN version 5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.github.cycladessoa.nyxlets:admin =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.2, =1.0.0.1, =1.0.0.2,...
XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))
Due to an incomplete fix for CVE-2019-9658, checkstyle was still vulnerable to XML External Entity XXE Processing. Impact User: Build Maintainers This vulnerability probably doesn't impact Maven/Gradle users as, in most cases, these builds are processing files that are trusted, or pre-vetted by a...
XML External Entity (XXE)
checkstyle is vulnerable to XML external entity attacks. The external-parameter-entities feature is not disabled by default, allowing a remote attacker to retrieve system files or perform requests on behalf of the server via a malicious XML document...
DEBIAN-CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
UBUNTU-CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
cn.com.infosec:netty-build (23), cn.zvo.log:log-datasource-aliyunsls (>=1.0, <=1.0.1) +306 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (>=5.4, <=8.28)
com.puppycrawl.tools:checkstyle MAVEN version =5.4, =1.0, =1.0, =1.0, =0.1.0, =0.1.0, =0.1.0, =1.2.0-alpha2, =0.1, =2.0.0, =0.0.1, =0.0.4 and more Source cves: CVE-2019-10782 Source advisory: MEND:CVE-2019-10782...
CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
CVE-2019-10782: Improper Restriction of XML External Entity Reference
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
XML External Entity (XXE) Injection
Overview com.puppycrawl.tools:checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. Affected versions of this package are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658 checkstyle was still vulnerable to...
XML External Entity (XXE)
checkstyle is vulnerable to XML external entity attacks. External DTDs are not disabled by default, allowing an attacker to inject malicious XML to retrieve system files or submit requests on behalf of the server to gain access to the internal network...
[SECURITY] Fedora 30 Update: checkstyle-8.0-7.fc30
A tool for checking Java source code for adherence to a set of rules...
Fedora Update for checkstyle FEDORA-2019-4696630d6f
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...