Lucene search
+L

5149 matches found

NVD
NVD
•added 2026/03/25 6:16 p.m.•14 views

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS0.00663EPSS
SaveExploits0References37
OSV
OSV
•added 2026/03/25 6:16 p.m.•12 views

AZL-81041 CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS7.9AI score0.00663EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/25 6:16 p.m.•11 views

DEBIAN-CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS5.9AI score0.00663EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/03/25 6:16 p.m.•11 views

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS6AI score0.00663EPSS
SaveExploits0References6
OSV
OSV
•added 2026/03/25 6:16 p.m.•13 views

UBUNTU-CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS6.2AI score0.00663EPSS
SaveExploits0References7
Snyk
Snyk
•added 2026/03/25 12:42 p.m.•13 views

Malicious Package

Overview changelog-utils-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.9AI score
SaveExploits0References2
OSV
OSV
•added 2026/03/25 12:42 p.m.•14 views

MAL-2026-2191 Malicious code in changelog-utils-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766b0a70c145b6eea78f6d7852be0ff75da958b1c0f465aa5108a1acabb5e9b2 The package changelog-utils-logger was found to contain malicious code. Source: ghsa-malware...

5.8AI score
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/03/25 10:17 a.m.•15 views

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

8.7CVSS6.8AI score0.01631EPSS
SaveExploits0References24
OSV
OSV
•added 2026/03/25 10:15 a.m.•8 views

SUSE-SU-2026:1027-1 Security update for salt

This update for salt fixes the following issues: - Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

7.5CVSS6.8AI score0.01631EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2026/03/25 10:15 a.m.•22 views

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

8.7CVSS6.8AI score0.01631EPSS
SaveExploits0References24
OSV
OSV
•added 2026/03/25 10:10 a.m.•13 views

SUSE-SU-2026:1012-1 Security update 5.0.7 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

7.8CVSS6.8AI score0.01631EPSS
SaveExploits0References16
Snyk
Snyk
•added 2026/03/25 12:00 a.m.•15 views

Directory Traversal

Overview org.codehaus.plexus:plexus-utils is a collection of various utility classes to ease working with strings, files, command lines, XML and more. Affected versions of this package are vulnerable to Directory Traversal via the extractFile function. An attacker can exploit this to execute...

8.8CVSS6.5AI score0.00663EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/25 12:00 a.m.•56 views

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

0.00663EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•23 views

PT-2026-28076

Name of the Vulnerable Software and Affected Versions plexus-utils versions prior to 6d780b3378829318ba5c2d29547e0012d5b29642 Description A directory traversal issue exists in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils. This allows an attacker to execute arbitrary...

8.8CVSS6.1AI score0.00663EPSS
SaveExploits0References177
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•26 views

Plexus-Utils 安全漏洞

Plexus-Utils is a general-purpose utility program developed by Plexus. This program is primarily used to simplify the handling of strings, files, command lines, and XML data. Versions of Plexus-Utils prior to 20c2f80 contained security vulnerabilities. These vulnerabilities stemmed from the extra...

7.5CVSS5.8AI score0.00856EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-67030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus- utils before 6d780b3378829318ba5c2d29547e0012d5b29642...

8.8CVSS7.7AI score0.00663EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•3 views

CVE-2025-67030: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS8.2AI score0.00663EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•19 views

Plexus-utils 安全漏洞

Plexus-utils is a general-purpose utility developed by Plexus Open Source. This program is primarily used to simplify the handling of strings, files, command lines, XML, etc. A security vulnerability existed in Plexus-utils 6d780b3378829318ba5c2d29547e0012d5b29642 and earlier versions. This...

8.8CVSS6AI score0.00663EPSS
SaveExploits0References6
OSV
OSV
•added 2026/03/25 12:00 a.m.•13 views

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS6.3AI score
SaveExploits0References39
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/24 9:07 a.m.•15 views

Malicious code in @the-coca-cola-company/ngps-global-common-utils (npm)

Malicious post-install script combined with low project popularity indicates potential malware. Arbitrary code execution is a major concern. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe31c5bb51c354ed83627a02c11ca4c8541e042623b1b987255941ffafdaff The...

6.3AI score
SaveExploits0References3
Rows per page
Query Builder