Most recent entries from all

bdu:2022-02758

cnvd-2018-03066

EUVD-2026-80937

fkie_cve-2017-1000487

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

GHSA-8vhq-qq4p-grq3 — OS Command Injection in Plexus-utils

Affected: Maven: org.codehaus.plexus:plexus-utils

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

gsd-2017-1000487

RHSA-2018:1322 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R7 security and bug fix update

karaf: LDAP injection in LDAPLoginModule undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666) undertow: improper whitespace parsing leading to potential HTTP request smuggling poi: Parsing of multiple file types can cause a denial of service via infinite loop or out of memory exception plexus-utils: Mishandled strings in Commandline class allow for command injection

UBUNTU-CVE-2017-1000487

Affected: Ubuntu:14.04:LTS: plexus-utils, Ubuntu:14.04:LTS: plexus-utils2, Ubuntu:16.04:LTS: plexus-utils

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.