com.alibaba.citrus.tool:autoconfig-maven-plugin (>=1.1, <=1.2), com.alibaba.citrus.tool:maven-autoconfig-plugin (1.0.10) +46 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.7)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.alibaba.citrus.tool:autoconfig-maven-plugin =1.1, =1.2 -...

org.ow2.util.maven:maven-deploymentplan-plugin (>=1.0.34, <=1.0.37), org.ow2.util.maven:maven-jbuilding-plugin (>=1.0.1, <=1.0.37) +7 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.ow2.util.maven:maven-deploymentplan-plugin =1.0.34, =1.0.1, =1.0.31, =1.0.13, =1.0.13,...

art.cutils:cutils (>=1.0.0, <=1.2.3), at.bestsolution:bindex-maven-plugin (>=1.0.0, <=3.0.0) +933 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - art.cutils:cutils =1.0.0, =1.0.0, =2.1.9, =2.1.9, =1.0.0, =1.0, =1.0, =1.0.0, =0.2.0, =0.2.7-rc...

br.com.ingenieux.launchify:launchify-core (0.0.1), br.com.ingenieux.launchify:launchify-hashdot (0.0.1) +559 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - br.com.ingenieux.launchify:launchify-core 0.0.1 - br.com.ingenieux.launchify:launchify-hashdot...

biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin (1.6.3), ch.rasc:embeddedtc-maven-plugin (>=1.0, <=1.6) +1499 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.6)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin 1.6.3 - ch.rasc:embeddedtc-maven-plugin...

br.com.digix:editordedocumento (>=2.0.0, <=2.4.0), com.bugvm:bugvm-gradle (>=1.1.0, <=1.1.5) +188 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.7)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - br.com.digix:editordedocumento =2.0.0, =1.1.0, =1.0.1, =0.0.1, =2.0.2, =1.0.0, =1.0.0, =0.7.2,...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +6672 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =0.0.13, =1.13.3, =1.1.1, =1.0.0, =1.0, =0.0.1, =3.0.1, =0.3, =1.0, =3.0.0, =1.0, =1.2.2 and more Source cves: CVE-2022-4245 Source advisory: OSV:GHSA-JCWR-X25H-X5FH...

biz.gabrys.maven:plugin-utils (>=1.0, <=1.4.1), net.sf.buildbox:buildbox-util (1.0.0) +5 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.0)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.maven:plugin-utils =1.0, =1.6.0, =1.6.0, =1.6.1, =1.8.4 -...

net.sf.mgp:maven-gwt-plugin (>=1.0, <=1.5.0), org.apache.portals.jetspeed-2:jetspeed-mvn-maven-plugin (>=2.2.0, <=2.3.1) potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - net.sf.mgp:maven-gwt-plugin =1.0, =2.2.0, =2.3.1 Source cves: CVE-2022-4244 Source advisory:...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +13792 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =0.1.0, =1.0.0, =2.1.0, =0.0.13, =1.13.3, =1.0.0, =1.2.3 - asia.redact.bracket.properties:pcompiler-maven-plugin 1.0.0 and more Source cves: CVE-2022-4245 Source advisory: MEND:CVE-2022-4245...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +13792 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =0.1.0, =1.0.0, =2.1.0, =0.0.13, =1.13.3, =1.0.0, =1.2.3 - asia.redact.bracket.properties:pcompiler-maven-plugin 1.0.0 and more Source cves: CVE-2022-4244 Source advisory: MEND:CVE-2022-4244...

Low: shadow-utils

Issue Overview: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve t...

Amazon Linux 2 : shadow-utils (ALAS-2023-2247)

The version of shadow-utils installed on the remote host is prior to 4.1.5.1-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2247 advisory. A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fai...

Memory Leak

libgpac.so is vulnerable to a Memory Leak. The vulnerability is caused by a defect in the gflistnew function at utils/list.c . This can lead to unexpected behavior resulting from a low memory condition or Denial Of Service DOS by crashing or hanging the program...

Fedora: Security Advisory (FEDORA-2023-aadd651a30)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: erofs-utils-1.6-3.fc39

EROFS stands for Enhanced Read-Only File System. It aims to be a general read-only file system solution for various use cases instead of just focusing on saving storage space without considering runtime performance. This package includes tools to create, check, and extract EROFS images...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +127 more potentially affected by CVE-2023-36472 via @strapi/utils (>=0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, <=4.11.6)

@strapi/utils NPM version =0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, =4.11.3, =4.11.2, =1.0.0, =1.5.1 - @codeparticle/strapi 4.9.2 - @codeparticle/strapi-admin 4.9.2 - @codeparticle/strapi-data-transfer 4.9.2 - @codeparticle/strapi-database 4.9.2 - @codeparticle/strapi-generators 4.9.2 -...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +110 more potentially affected by CVE-2023-36472 via @strapi/utils (>=4.0.0-beta.0, <=4.11.6)

@strapi/utils NPM version =4.0.0-beta.0, =4.11.3, =4.11.2, =1.0.0, =1.5.1 - @codeparticle/strapi 4.9.2 - @codeparticle/strapi-admin 4.9.2 - @codeparticle/strapi-data-transfer 4.9.2 - @codeparticle/strapi-database 4.9.2 - @codeparticle/strapi-generators 4.9.2 - @codeparticle/strapi-permissions 4.9...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +110 more potentially affected by CVE-2023-36472 via @strapi/utils (>=4.0.0-beta.0, <=4.11.6)

@strapi/utils NPM version =4.0.0-beta.0, =4.11.3, =4.11.2, =1.0.0, =1.5.1 - @codeparticle/strapi 4.9.2 - @codeparticle/strapi-admin 4.9.2 - @codeparticle/strapi-data-transfer 4.9.2 - @codeparticle/strapi-database 4.9.2 - @codeparticle/strapi-generators 4.9.2 - @codeparticle/strapi-permissions 4.9...

Malicious code in @get-bridge/bridge-string-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e69ac01e87147a835e5ab4045ff640d7fa9d2eb636aeb12eef6e1fc1577d021f The OpenSSF Package Analysis project identified '@get-bridge/bridge-string-utils' @ 99.99.99 npm as malicious. It is considered malicious becaus...