com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

com.buschmais.jqassistant.sonar:jqassistant.sonar.projectrules (>=1.1.3, <=1.1.4), com.buschmais.jqassistant.sonar:jqassistant.sonar.sonarrules (>=1.1.3, <=1.1.4) +369 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.buschmais.jqassistant.sonar:jqassistant.sonar.projectrules =1.1.3, =1.1.3, =1.0.0, =0.2.1,...

com.realrunners:scalate-maven-plugin_2.13 (0.0.4), com.stephenn:scalate-maven-plugin_2.12 (>=0.0.1, <=0.0.2) +15 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.2)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.realrunners:scalate-maven-plugin2.13 0.0.4 - com.stephenn:scalate-maven-plugin2.12 =0.0.1,...

biz.gabrys.maven:plugin-utils (>=1.0, <=1.4.1), net.sf.buildbox:buildbox-util (1.0.0) +5 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.0)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.maven:plugin-utils =1.0, =1.6.0, =1.6.0, =1.6.1, =1.8.4 -...

biz.aqute.bnd:biz.aqute.bnd.maven (>=4.3.0, <=5.3.0), com.aerse.maven:apt-maven-plugin (>=1.19, <=1.20) +356 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.aqute.bnd:biz.aqute.bnd.maven =4.3.0, =1.19, =1.0, =2.0.0, =1.4.3, =1.4.3, =1.11.0, =1.11.0...

com.alibaba.citrus.tool:autoconfig-maven-plugin (>=1.1, <=1.2), com.alibaba.citrus.tool:maven-autoconfig-plugin (1.0.10) +46 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.7)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.alibaba.citrus.tool:autoconfig-maven-plugin =1.1, =1.2 -...

co.actioniq.thirdparty.com.twitter:scrooge-generator_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f), co.actioniq.thirdparty.com.twitter:scrooge-linter_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f) +87 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - co.actioniq.thirdparty.com.twitter:scrooge-generator2.10...

com.devspan.mojo.javascript:javascript-compressor-api (>=0.9.1, <=0.9.3), com.devspan.mojo.javascript:javascript-maven-archive (>=0.9.1, <=0.9.3) +47 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.9)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.devspan.mojo.javascript:javascript-compressor-api =0.9.1, =0.9.1, =0.9.1, =0.9.1, =0.9.1,...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), at.bestsolution:at.bestsolution.maven.publisher (>=1.0.0, <=1.1.2) +2797 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.15)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =1.0.0, =0.0.1, =1.0, =0.1.0, =3.1.0, =3.3.0, =3.1.0, =3.1.0, =4.3.0, =4.0.0, =5.3.0 and more Source cves: CVE-2017-1000487 Source advisory: GHSA-8VHQ-QQ4P-GRQ3...

com.anasoft.os:m2st-doxia-macros (2.0), com.soebes.maven.plugins.dmg:doxygen-maven-plugin (1.0.1) +54 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.7)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anasoft.os:m2st-doxia-macros 2.0 - com.soebes.maven.plugins.dmg:doxygen-maven-plugin 1.0.1 ...

com.adobe.adep.maven:content-package-maven-plugin (0.0.12), com.coherentlogic.fred.client:fred-client-webstart-application (>=0.9.3, <=0.9.14) +74 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.9)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.adobe.adep.maven:content-package-maven-plugin 0.0.12 -...

org.ow2.util.maven:maven-deploymentplan-plugin (>=1.0.34, <=1.0.37), org.ow2.util.maven:maven-jbuilding-plugin (>=1.0.1, <=1.0.37) +7 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.ow2.util.maven:maven-deploymentplan-plugin =1.0.34, =1.0.1, =1.0.31, =1.0.13, =1.0.13,...

ai.rev.speechtotext:revai-java-sdk-speechtotext (>=1.0.0, <=1.4.0), ai.rev:revai-java-sdk (>=2.1.0, <=2.5.0) +564 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.rev.speechtotext:revai-java-sdk-speechtotext =1.0.0, =2.1.0, =1.0, =0.1-1, =1.0.0, =1.0.0,...

biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin (1.6.3), ch.rasc:embeddedtc-maven-plugin (>=1.0, <=1.6) +1499 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.6)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin 1.6.3 - ch.rasc:embeddedtc-maven-plugin...

org.apache.continuum:continuum-api (>=1.3.4, <=1.4.2), org.apache.continuum:continuum-artifact-manager (1.4.2) +30 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.11)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.continuum:continuum-api =1.3.4, =1.3.4, =1.3.4, =1.3.4, =1.4.1, =1.3.4, =1.3.4,...

maven:3.6 security and enhancement update

An update is available for apache-commons-io, atinject, jsr-305, maven-shared-utils, plexus-cipher, aopalliance, plexus-classworlds, guava, apache-commons-cli, plexus-containers, plexus-sec-dispatcher, httpcomponents-client, maven-resolver, apache-commons-lang3, plexus-interpolation, sisu,...

[SECURITY] Fedora 34 Update: maven-shared-utils-3.2.1-0.9.fc34

This project aims to be a functional replacement for plexus-utils in Maven. It is not a 100% API compatible replacement though but a replacement with improvements: lots of methods got cleaned up, generics got added and we dropp ed a lot of unused code...

The vulnerability of the Plexus-utils package from the IBM Netezza Analytics extended analytics platform allows a hacker to execute arbitrary commands.

The vulnerability of the Plexus-utils package of the IBM Netezza Analytics extended analytics platform exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

Mageia: Security Advisory (MGASA-2014-0056)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0005)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...