Lucene search
+L

98 matches found

OSV
OSV
•added 2023/09/25 7:20 p.m.•19 views

CVE-2022-4244 Codehaus-plexus: directory traversal

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS7.1AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2023/09/25 7:20 p.m.•43 views

CVE-2022-4244 Codehaus-plexus: directory traversal

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS6.5AI score0.01347EPSS
SaveExploits0References4
Mend
Mend
•added 2023/09/25 7:20 p.m.•3 views

CVE-2022-4244

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

8.7CVSS0.01347EPSS
SaveExploits0References11
Debian CVE
Debian CVE
•added 2023/09/25 7:20 p.m.•43 views

CVE-2022-4244

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS7.5AI score0.01347EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/25 12:00 a.m.•2 views

CVE-2022-4244: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS7.1AI score0.01347EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/25 12:00 a.m.•3 views

CVE-2022-4245: XML Injection (aka Blind XPath Injection)

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS5.6AI score0.00694EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2023/06/28 3:59 p.m.•18 views

codehaus-plexus: Directory Traversal

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS5.8AI score0.01347EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/06/28 3:59 p.m.•22 views

codehaus-plexus: XML External Entity (XXE) Injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS5.7AI score0.00694EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/06/28 3:59 p.m.•63 views

Important: Red Hat Security Advisory: Red Hat Integration Camel K 1.10.1 release security update

Red Hat Integration Camel K 1.10.1 release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of Important. A security update for Camel K 1.10.1 is now...

8.2CVSS6.7AI score0.01347EPSS
SaveExploits3References8
IBM Security Bulletins
IBM Security Bulletins
•added 2023/06/13 10:59 a.m.•168 views

Security Bulletin: Multiple Vulnerabilities of Jackson-Mapper-asl have affected APM Linux KVM Agent

Summary APM Linux KVM Agent is vulnerable to Jackson-mapper-asl vulnerabilities described in CVE-2019-10202 and CVE-2019-10172. The fix includes jackson-mapper-asl-1.9.13.jar upgraded to jackson-databind-2.14.0.jar Vulnerability Details CVEID:CVE-2019-10202 DESCRIPTION: Red Hat JBoss Enterprise...

9.8CVSS8.7AI score0.16606EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2023/05/04 3:59 p.m.•22 views

codehaus-plexus: Directory Traversal

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS5.8AI score0.01347EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/05/04 3:59 p.m.•28 views

codehaus-plexus: XML External Entity (XXE) Injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS5.7AI score0.00694EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•253 views

K39573629: jackson-mapper-asl vulnerability CVE-2019-10172

Security Advisory Description A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes. CVE-2019-10172 Impact There is no impact; F5 products a...

7.5CVSS7AI score0.16606EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 3:30 a.m.•10 views

SUSE CVE-2022-4244

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS8.5AI score0.01347EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:30 a.m.•8 views

SUSE CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS9AI score0.00694EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/12/01 6:56 a.m.•54 views

CVE-2022-4244

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS8AI score0.01347EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/12/01 6:56 a.m.•46 views

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS8.4AI score0.00694EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/12/01 12:00 a.m.•20 views

codehaus-plexus 路径遍历漏洞

codehaus-plexus is codehaus-plexus open source a collection of various utility classes . It can easily handle strings, files, command line, XML, etc. A path traversal vulnerability exists in codehaus-plexus that stems from directory traversal...

7.5CVSS7.4AI score0.01347EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/12/01 12:00 a.m.•23 views

codehaus-plexus 代码问题漏洞

codehaus-plexus is codehaus-plexus open source a collection of various utility classes . It can easily handle strings, files, command lines, XML, and more. codehaus-plexus has a security vulnerability that stems from XML External Entity XXE injection...

4.3CVSS5.7AI score0.00694EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/12/01 12:00 a.m.•23 views

PT-2022-7267 · Atlassian · Bamboo Server +1

Name of the Vulnerable Software and Affected Versions: codeplex-codehaus affected versions not specified Bamboo Data Center and Server versions 9.2.1 through 9.2.7 Description: A flaw was found in codeplex-codehaus, allowing a directory traversal attack to access files and directories stored...

7.8CVSS6.5AI score0.01347EPSS
SaveExploits0References23
Rows per page
Query Builder