193 matches found
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
Exploit for Cleartext Transmission of Sensitive Information in Keepass
KeePass 2.53/cmdline files and store the pid of ones with t...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 (1.5.0-rc-1), com.buschmais.jqassistant.neo4jserver:neo4jv3 (1.5.0-rc-1) +1 more potentially affected by unknown CVE via org.neo4j.procedure:apoc (3.4.0.2)
org.neo4j.procedure:apoc MAVEN version 3.4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 1.5.0-rc-1 -...
K97399672: Apache Maven vulnerability CVE-2022-29599
Security Advisory Description In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks. CVE-2022-29599 Impact There is no impact; F5 products are not affected by this vulnerability...
SUSE CVE-2022-29599
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 (>=1.5.0, <=1.6.0), com.buschmais.jqassistant.neo4jserver:neo4jv3 (>=1.5.0, <=1.6.0) +1 more potentially affected by CVE-2022-23532 via org.neo4j.procedure:apoc (3.4.0.3)
org.neo4j.procedure:apoc MAVEN version 3.4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 =1.5.0, =1.5.0, =1.5.0, =1.6.0 Source cves:...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
Amazon Linux 2022 : maven-shared-utils (ALAS2022-2022-242)
The version of maven-shared-utils installed on the remote host is prior to 3.3.4-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-242 advisory. - In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings...
[SECURITY] [DSA 5242-1] maven-shared-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5242-1 [email protected] https://www.debian.org/security/ Aron Xu September 28, 2022 https://www.debian.org/security/faq -...
[SECURITY] [DLA 3086-1] maven-shared-utils security update
Debian LTS Advisory DLA-3086-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 29, 2022 https://wiki.debian.org/LTS Package : maven-shared-utils Version : 3.3.0-1+deb10u1 CVE ID : CVE-2022-29599 Debian Bug : 1012314 It was discovered that the Commandline...
com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 (1.5.0-rc-1), com.buschmais.jqassistant.neo4jserver:neo4jv3 (1.5.0-rc-1) +1 more potentially affected by CVE-2022-37423 via org.neo4j.procedure:apoc (3.4.0.2)
org.neo4j.procedure:apoc MAVEN version 3.4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 1.5.0-rc-1 -...
com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 (>=1.7.0-ms1, <=1.7.0-ms3), com.buschmais.jqassistant.neo4jserver:neo4jv3 (>=1.7.0-ms1, <=1.7.0-ms3) +1 more potentially affected by CVE-2022-37423 via org.neo4j.procedure:apoc (3.5.0.1)
org.neo4j.procedure:apoc MAVEN version 3.5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 =1.7.0-ms1, =1.7.0-ms1, =1.7.0-ms1, =1.7.0-ms3...
OESA-2022-1684 maven-shared-utils security update
This package can be the functional replacement of plexus-utils in Maven. At the same time, the package has many hightlights, such as: a lot of methods got cleaned up, generics got added and a lot of unused code dropped. Security Fixes: In Apache Maven maven-shared-utils prior to version 3.3.3, th...
GHSA-RHGR-952R-6P8Q Command injection in Apache Maven maven-shared-utils
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
