16250 matches found
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), org.jenkins-ci.main:jenkins-test-harness (1.520) +24 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.520)
org.jenkins-ci.main:jenkins-core MAVEN version 1.520 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.4, =1.0.4, =1.0.4, =2.0,...
com.exxeta.jenkins.plugins:sidebar-update-notification (>=1.0.1, <=1.1.0), jp.shiftinc.jenkins.plugins:discard-old-build (>=1.0.3, <=1.03) +11 more potentially affected by CVE-2023-27900 via org.jenkins-ci.main:jenkins-core (1.500)
org.jenkins-ci.main:jenkins-core MAVEN version 1.500 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.exxeta.jenkins.plugins:sidebar-update-notification =1.0.1, =1.0.3, =2.6, =0.0.5, =0.2.0...
com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), org.jenkins-ci.main:jenkins-test-harness (1.503) +5 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.503)
org.jenkins-ci.main:jenkins-core MAVEN version 1.503 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =1.15, =1.17 - org.jenkins-ci.plugins:plugin...
org.jenkins-ci.main:jenkins-test-harness (1.472), org.jenkins-ci.main:jenkins-war (1.472) +5 more potentially affected by CVE-2023-27900 via org.jenkins-ci.main:jenkins-core (1.472)
org.jenkins-ci.main:jenkins-core MAVEN version 1.472 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.472 - org.jenkins-ci.main:jenkins-war 1.472 -...
org.jenkins-ci.main:jenkins-test-harness (1.433), org.jenkins-ci.main:jenkins-war (1.433) +6 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.433)
org.jenkins-ci.main:jenkins-core MAVEN version 1.433 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.433 - org.jenkins-ci.main:jenkins-war 1.433 -...
org.jenkins-ci.main:jenkins-test-harness (1.477), org.jenkins-ci.main:jenkins-war (1.477) +7 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.477)
org.jenkins-ci.main:jenkins-core MAVEN version 1.477 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.477 - org.jenkins-ci.main:jenkins-war 1.477 -...
org.jenkins-ci.main:jenkins-test-harness (1.477), org.jenkins-ci.main:jenkins-war (1.477) +7 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.477)
org.jenkins-ci.main:jenkins-core MAVEN version 1.477 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.477 - org.jenkins-ci.main:jenkins-war 1.477 -...
com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 (1.5.0-rc-1), com.buschmais.jqassistant.neo4jserver:neo4jv3 (1.5.0-rc-1) +1 more potentially affected by unknown CVE via org.neo4j.procedure:apoc (3.4.0.2)
org.neo4j.procedure:apoc MAVEN version 3.4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 1.5.0-rc-1 -...
io.undertow:undertow-servlet (1.0.14.final), io.undertow:undertow-websockets-jsr (1.0.14.final) +1 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.14.final)
io.undertow:undertow-core MAVEN version 1.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.14.final - io.undertow:undertow-websockets-jsr 1.0.14.final -...
SUSE CVE-2017-1000397
Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. Maven Plugin 3.0 no longer has a dependency on commons-httpclient...
cn.jiangzeyin.fast-boot:common-boot (>=1.2.13, <=1.2.19), cn.jiangzeyin.fast-boot:common-redis (>=1.2.13, <=1.2.19) +2 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.2.1)
cn.hutool:hutool-all MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.2.13, =1.2.13, =1.0.0, =1.0.4 - io.github.pleuvoir:pikaq 1.2.0 Source cves:...
com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 (>=1.5.0, <=1.6.0), com.buschmais.jqassistant.neo4jserver:neo4jv3 (>=1.5.0, <=1.6.0) +1 more potentially affected by CVE-2022-23532 via org.neo4j.procedure:apoc (3.4.0.3)
org.neo4j.procedure:apoc MAVEN version 3.4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 =1.5.0, =1.5.0, =1.5.0, =1.6.0 Source cves:...
GHSA-4X6G-3CMX-W76R Snyk plugins vulnerable to Command Injection
The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1.24.2; the package snyk-docker-plugin...
PT-2022-15754 · Snyk · Snyk-Python-Plugin +7
Name of the Vulnerable Software and Affected Versions: snyk versions prior to 1.1064.0 snyk-mvn-plugin versions prior to 2.31.3 snyk-gradle-plugin versions prior to 3.24.5 @snyk/snyk-cocoapods-plugin versions prior to 2.5.3 snyk-sbt-plugin versions prior to 2.16.2 snyk-python-plugin versions prio...
org.apache.uima:jcasgen-maven-plugin (2.4.1), org.apache.uima:pearpackagingmavenplugin (2.4.1) +9 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.4.1)
org.apache.uima:uimaj-core MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - org.apache.uima:jcasgen-maven-plugin 2.4.1 - org.apache.uima:pearpackagingmavenplugin 2.4.1 -...
Command Injection
Overview snyk-mvn-plugin is a plugin for the Snyk CLI tool, providing dependency metadata for Maven projects that use mvn and have a pom.xml file. Affected versions of this package are vulnerable to Command Injection due to an incomplete fix for CVE-2022-40764. A successful exploit allows attacke...
au.net.causal.maven.plugins:boxdb-maven-plugin (3.2), co.elastic.docker-base:co.elastic.docker-base.gradle.plugin (>=0.0.1, <=0.0.5) +78 more potentially affected by CVE-2022-25914 via com.google.cloud.tools:jib-core (>=0.1.1, <=0.21.0)
com.google.cloud.tools:jib-core MAVEN version =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0, =0.4.0, =0.34.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.4.2 and more Source cves: CVE-2022-25914 Source advisory: MEND:CVE-2022-25914...
com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 (1.5.0-rc-1), com.buschmais.jqassistant.neo4jserver:neo4jv3 (1.5.0-rc-1) +1 more potentially affected by CVE-2022-37423 via org.neo4j.procedure:apoc (3.4.0.2)
org.neo4j.procedure:apoc MAVEN version 3.4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 1.5.0-rc-1 -...
com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 (>=1.7.0-ms1, <=1.7.0-ms3), com.buschmais.jqassistant.neo4jserver:neo4jv3 (>=1.7.0-ms1, <=1.7.0-ms3) +1 more potentially affected by CVE-2022-37423 via org.neo4j.procedure:apoc (3.5.0.1)
org.neo4j.procedure:apoc MAVEN version 3.5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv3 =1.7.0-ms1, =1.7.0-ms1, =1.7.0-ms1, =1.7.0-ms3...
com.dslplatform:dsl-clc (>=1.6.2, <=1.7.2), com.dslplatform:dsl-json-processor (>=0.8, <=1.2) +1 more potentially affected by CVE-2022-31197 via org.postgresql:postgresql (9.4.1208.jre6)
org.postgresql:postgresql MAVEN version 9.4.1208.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.6.2, =0.8, =0.7, =0.9 Source cves: CVE-2022-31197 Source advisory:...