Skip to contentEclipse Foundation vulnerabilities
Newest
- eclipse jettyEclipse Jetty GZIP buffer releaseCVE-2024-13009Fix available7.2 High
- eclipse openj9In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is...CVE-2023-25977.0 High
- eclipse glassfish, the eclipse foundation eclipse glassfish +1 morePath Traversal In Eclipse GlassFishCVE-2022-2712Fix available6.5 Medium
- azure-rtos filex, microsoft azure rtos filex +1 moreAzure RTOS FileX vulnerable to Buffer OfferflowCVE-2022-393435.6 Medium
- azure-rtos usbx, microsoft azure rtos usbx +1 moreAzure RTOS USBX vulnerable to buffer overflowCVE-2022-393449.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type...CVE-2022-3676Fix available6.5 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflowCVE-2022-392938.6 High
- azure-rtos usbx, eclipse threadx usbx +1 moreUSBX Host CDC ECM integer underflow with buffer overflowCVE-2022-360637.6 High
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreJetty SslConnection does not release pooled ByteBuffers in case of errorsCVE-2022-2191Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 moreJetty invalid URI parsing may produce invalid HttpURI.authorityCVE-2022-2047Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of serviceCVE-2022-2048Fix available7.5 High
- azure-rtos usbx, eclipse threadx usbx +1 morePotential buffer overflow in function DFU upload in Azure RTOS USBXCVE-2022-292469.8 Critical
- azure-rtos usbx, eclipse threadx usbx +1 moreBuffer overflow on HUB descriptor in Azure RTOS USBXCVE-2022-292237.5 High
- eclipse openj9, the eclipse foundation eclipse openj9, oracle java se +2 moreIn Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during...CVE-2021-410415.3 Medium
- eclipse openj9, eclipse foundation omr, the eclipse foundation eclipse omr +2 moreIn Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for...CVE-2021-410359.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 moreEncoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429Public exploitFix availableEPSS 99.3%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 moreSessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428Public exploitFix available2.9 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2021-28169Fix availableEPSS 78.5%5.3 Medium
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes...CVE-2021-281676.5 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 moreJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resourcesCVE-2021-28165Public exploitFix availableEPSS 53.9%7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 moreAuthorization Before Parsing and Canonicalization in jettyCVE-2021-28164Public exploitFix availableEPSS 82.4%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 moreDirectory exposure in jettyCVE-2021-28163Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 moreDOS vulnerability for Quoted Quality CSV headersCVE-2020-27223Public exploitFix availableEPSS 78.0%5.2 Medium
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 up to version 0.23, there is potential for a stack-based buffer overflow when...CVE-2020-272219.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 moreBuffer not correctly recycled in Gzip Request inflationCVE-2020-27218Fix available4.8 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2020-27216Fix available7.0 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 morePath Traversal in Eclipse VertCVE-2019-17640Public exploitFix available9.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method...CVE-2019-176395.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-17638Public exploitFix availableEPSS 11.1%9.4 Critical
- eclipse foundation jerseyjersey: XXE via parameter entitiesCVE-2014-3643Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreUnescaped exception messages in error responses in JettyCVE-2019-17632Fix available6.1 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +5 more +7 moreFrom Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or...CVE-2019-176319.1 Critical
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to...CVE-2019-117747.4 High
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection...CVE-2019-117737.8 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreAll builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to...CVE-2019-117757.4 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not...CVE-2019-117729.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreAIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code...CVE-2019-117717.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 moreInformation Exposure vulnerability in Eclipse JettyCVE-2019-10246Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-10241Fix available6.1 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 moreIn Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...CVE-2019-102457.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, fedoraproject fedora +2 moreUncontrolled Resource Consumption in org.eclipse.jetty:jetty-serverCVE-2018-12545Fix available7.5 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on...CVE-2018-125499.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native...CVE-2018-125479.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto...CVE-2018-125489.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreModerate severity vulnerability that affects io.vertx:vertx-coreCVE-2018-12544Fix available9.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreEclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external locationCVE-2018-12542Public exploitFix available9.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreExcessive memory allocationCVE-2018-12541Fix available6.5 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, oracle enterprise manager base platform +2 moreIn Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach...CVE-2018-125397.8 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreModerate severity vulnerability that affects io.vertx:vertx-coreCVE-2018-12537Public exploitFix available5.3 Medium
- Show moreLoading…