PT-2026-28076

Name of the Vulnerable Software and Affected Versions plexus-utils versions prior to 6d780b3378829318ba5c2d29547e0012d5b29642 Description A directory traversal issue exists in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils. This allows an attacker to execute arbitrary...

Plexus-Utils security vulnerabilities

Plexus-Utils is a general-purpose utility program developed by Plexus. This program is primarily used to simplify the handling of strings, files, command lines, and XML data. Versions of Plexus-Utils prior to 20c2f80 contained security vulnerabilities. These vulnerabilities stemmed from the extra...

EUVD-2022-3243

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-1000487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings. CVE-2017-1000487 Note...

RHEL 7 : plexus-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - plexus-utils: Mishandled strings in Commandline class allow for command injection CVE-2017-1000487 Note that Nessus...

Fedora: Security Advisory for plexus-utils (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +6672 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =0.0.13, =1.13.3, =1.1.1, =1.0.0, =1.0, =0.0.1, =3.0.1, =0.3, =1.0, =3.0.0, =1.0, =1.2.2 and more Source cves: CVE-2022-4245 Source advisory: OSV:GHSA-JCWR-X25H-X5FH...

ai.rev.speechtotext:revai-java-sdk-speechtotext (>=1.0.0, <=1.4.0), ai.rev:revai-java-sdk (>=2.1.0, <=2.5.0) +564 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.rev.speechtotext:revai-java-sdk-speechtotext =1.0.0, =2.1.0, =1.0, =0.1-1, =1.0.0, =1.0.0,...

ch.fortysix:maven-postman-plugin (>=0.1.0, <=0.1.6), com.github.automately:automately-core (>=1.8.6, <=1.8.8) +155 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ch.fortysix:maven-postman-plugin =0.1.0, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0....

com.googlecode.apparat:apparat-maven-plugin (1.0.rc4), org.apache.maven:apache-maven (3.0-beta-1) +33 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.3)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.googlecode.apparat:apparat-maven-plugin 1.0.rc4 - org.apache.maven:apache-maven 3.0-beta-1 ...

com.devspan.mojo.javascript:javascript-compressor-api (>=0.9.1, <=0.9.3), com.devspan.mojo.javascript:javascript-maven-archive (>=0.9.1, <=0.9.3) +47 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.9)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.devspan.mojo.javascript:javascript-compressor-api =0.9.1, =0.9.1, =0.9.1, =0.9.1, =0.9.1,...

co.actioniq.thirdparty.com.twitter:scrooge-generator_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f), co.actioniq.thirdparty.com.twitter:scrooge-linter_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f) +87 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.5.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - co.actioniq.thirdparty.com.twitter:scrooge-generator2.10...

biz.aqute.bnd:biz.aqute.bnd.maven (>=4.3.0, <=5.3.0), com.aerse.maven:apt-maven-plugin (>=1.19, <=1.20) +356 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.5.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.aqute.bnd:biz.aqute.bnd.maven =4.3.0, =1.19, =1.0, =2.0.0, =1.4.3, =1.4.3, =1.11.0, =1.11.0...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

com.anasoft.os:m2st-doxia-macros (2.0), com.soebes.maven.plugins.dmg:doxygen-maven-plugin (1.0.1) +54 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.7)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anasoft.os:m2st-doxia-macros 2.0 - com.soebes.maven.plugins.dmg:doxygen-maven-plugin 1.0.1 ...

biz.aqute.bnd:biz.aqute.bnd.maven (>=4.3.0, <=5.3.0), com.aerse.maven:apt-maven-plugin (>=1.19, <=1.20) +356 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.aqute.bnd:biz.aqute.bnd.maven =4.3.0, =1.19, =1.0, =2.0.0, =1.4.3, =1.4.3, =1.11.0, =1.11.0...

org.apache.maven.continuum:continuum-api (>=1.1-beta-1, <=1.1-beta-2), org.apache.maven.continuum:continuum-configuration (>=1.1-beta-1, <=1.1-beta-2) +54 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.3)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.continuum:continuum-api =1.1-beta-1, =1.1-beta-1, =1.1-beta-1, =1.1-beta-1,...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +6672 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =0.0.13, =1.13.3, =1.1.1, =1.0.0, =1.0, =0.0.1, =3.0.1, =0.3, =1.0, =3.0.0, =1.0, =1.2.2 and more Source cves: CVE-2022-4245 Source advisory: GHSA-JCWR-X25H-X5FH...

au.net.ocean.maven.plugin:maven-plugin-tools (1.1), ch.hortis.sonar:sonar-maven-plugin (>=0.2, <=1.0.2) +402 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.net.ocean.maven.plugin:maven-plugin-tools 1.1 - ch.hortis.sonar:sonar-maven-plugin =0.2, =0.5....