aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +24312 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =1.9.0, =1.9.0, =1.9.0, =0.1, =0.1.0, =0.0.1, =0.0.2 - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 - ai.mattmann.mnemosyne:cas-pge 1.11.0 - ai.mattmann.mnemosyne:cas-product 1.11.0 -...

at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1, <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1, <=4.1.0) +2055 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0, <=4.0.2)

org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-m5, =1.0.0-m6, =1.0.0-m1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-m10 and more Source cves: CVE-2025-67030 Source advisory: MEND:CVE-2025-67030...

EUVD-2022-3243

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-1000487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings. CVE-2017-1000487 Note...

RHEL 7 : plexus-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - plexus-utils: Mishandled strings in Commandline class allow for command injection CVE-2017-1000487 Note that Nessus...

Fedora: Security Advisory for plexus-utils (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.ow2.util.maven:maven-deploymentplan-plugin (>=1.0.34, <=1.0.37), org.ow2.util.maven:maven-jbuilding-plugin (>=1.0.1, <=1.0.37) +7 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.ow2.util.maven:maven-deploymentplan-plugin =1.0.34, =1.0.1, =1.0.31, =1.0.13, =1.0.13,...

com.devspan.mojo.javascript:javascript-compressor-api (>=0.9.1, <=0.9.3), com.devspan.mojo.javascript:javascript-maven-archive (>=0.9.1, <=0.9.3) +47 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.9)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.devspan.mojo.javascript:javascript-compressor-api =0.9.1, =0.9.1, =0.9.1, =0.9.1, =0.9.1,...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +6672 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =0.0.13, =1.13.3, =1.1.1, =1.0.0, =1.0, =0.0.1, =3.0.1, =0.3, =1.0, =3.0.0, =1.0, =1.2.2 and more Source cves: CVE-2022-4245 Source advisory: OSV:GHSA-JCWR-X25H-X5FH...

co.actioniq.thirdparty.com.twitter:scrooge-generator_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f), co.actioniq.thirdparty.com.twitter:scrooge-linter_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f) +87 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.5.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - co.actioniq.thirdparty.com.twitter:scrooge-generator2.10...

org.apache.geronimo.devtools:maven-eclipsepde-plugin (>=1.0, <=1.2), org.apache.maven.plugins:maven-release-plugin (>=2.0-beta-5, <=2.0-beta-7) +45 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.3)

org.codehaus.plexus:plexus-utils MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.geronimo.devtools:maven-eclipsepde-plugin =1.0, =2.0-beta-5, =1.0-alpha-1, =1.0-beta-1...

com.realrunners:scalate-maven-plugin_2.13 (0.0.4), com.stephenn:scalate-maven-plugin_2.12 (>=0.0.1, <=0.0.2) +15 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.2)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.realrunners:scalate-maven-plugin2.13 0.0.4 - com.stephenn:scalate-maven-plugin2.12 =0.0.1,...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +6672 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =0.0.13, =1.13.3, =1.1.1, =1.0.0, =1.0, =0.0.1, =3.0.1, =0.3, =1.0, =3.0.0, =1.0, =1.2.2 and more Source cves: CVE-2022-4244 Source advisory: GHSA-G6PH-X5WF-G337...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

ai.rev.speechtotext:revai-java-sdk-speechtotext (>=1.0.0, <=1.4.0), ai.rev:revai-java-sdk (>=2.1.0, <=2.5.0) +564 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.rev.speechtotext:revai-java-sdk-speechtotext =1.0.0, =2.1.0, =1.0, =0.1-1, =1.0.0, =1.0.0,...

com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin (>=1.5.2, <=1.6.40), com.anaptecs.jeaf.generator:jeaf-generator-test-message-constants (>=1.5.13, <=1.6.40) +146 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (2.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin =1.5.2, =1.5.13, =4.1.1, =3.1.12, =1.0,...

ch.fortysix:maven-postman-plugin (>=0.1.0, <=0.1.6), com.github.automately:automately-core (>=1.8.6, <=1.8.8) +155 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ch.fortysix:maven-postman-plugin =0.1.0, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0....

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

com.atlassian.maven.plugins:maven-clover2-plugin (>=2.3.1, <=2.4.2), com.intel.analytics.bigdl.core.dist:all (>=0.4.0, <=0.13.0) +192 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.atlassian.maven.plugins:maven-clover2-plugin =2.3.1, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +6672 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =0.0.13, =1.13.3, =1.1.1, =1.0.0, =1.0, =0.0.1, =3.0.1, =0.3, =1.0, =3.0.0, =1.0, =1.2.2 and more Source cves: CVE-2022-4245 Source advisory: GHSA-JCWR-X25H-X5FH...