Skip to contentEclipse Foundation vulnerabilities
Newest
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo component HTTP server single PUT request integer underflowCVE-2025-22595.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP component server denial of serviceCVE-2025-22607.1 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-22585.3 Medium
- eclipse cyclone data distribution service, eclipse foundation cyclone dds +1 moreInteger Underflow in DDS_Security_Deserialize_ methods may lead to OOB readCVE-2024-108388.8 High
- eclipse omrEclipse OMR: Buffer overflow vulnerabilityCVE-2025-14717.1 High
- eclipse omrEclipse OMR: Null pointer dereference vulnerabilityCVE-2025-14705.1 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-07275.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-07285.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server denial of serviceCVE-2025-07267.1 High
- eclipse foundation openvsx, eclipse open vsx +1 moreImproper Authorization in /user/namespace/{namespace}/detailsCVE-2025-10076.9 Medium
- eclipse openj9, eclipse foundation open j9 +1 moreEclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLengthCVE-2024-109173.7 Low
- eclipse mosquittoEclipse Mosquito: Double free vulnerabilityCVE-2024-3935Fix available6.0 Medium
- eclipse mosquittoEclipse Mosquito: Heap Buffer Overflow in my_subscribe_callbackCVE-2024-10525Fix availableEPSS 59.2%7.2 High
- eclipse jettyJetty URI parsing of invalid authorityCVE-2024-6763Fix available3.7 Low
- eclipse mosquittoMemory leakCVE-2024-8376Fix available7.2 High
- eclipse glassfishGlassfish redirect to untrusted siteCVE-2024-9329Fix available6.9 Medium
- eclipse dataspace componentsEDC DataSetResolver policy filtering missingCVE-2024-92025.3 Medium
- eclipse dataspace components, eclipse foundation edc, edc connector +2 moreEclipse EDC: Consumer pull transfer token validation checks not appliedCVE-2024-8642Fix available5.0 Medium
- eclipse glassfishEclipse Glassfish: URL redirection vulnerability to untrusted sitesCVE-2024-8646Fix available6.1 Medium
- eclipse vert.xEclipse Vert.x gRPC server does not limit the maximum message sizeCVE-2024-8391Fix available6.9 Medium
- eclipse parssonEclipse Parsson stack overflow with deeply nested objectsCVE-2023-7272Fix available8.6 High
- eclipse openj9, eclipse foundation open j9 +1 moreEclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a bufferCVE-2024-39335.3 Medium
- eclipse dittoEclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of InputCVE-2024-5165Fix available6.5 Medium
- eclipse edc connector, eclipse foundation edc +1 moreEclipse EDC: OAuth2 Credential Exfiltration VulnerabilityCVE-2024-4536Fix available6.8 Medium
- eclipse ide, target management +1 moreEclipse Target Management <= 4.5.500 Command InjectionCVE-2024-07409.8 Critical
- eclipse kuraEclipse Kura LogServlet vulnerabilityCVE-2024-30467.5 High
- eclipse threadxInteger wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()CVE-2024-22127.3 High
- eclipse threadxMissing array size check in _Mtxinit() in the Xtensa portCVE-2024-22147.0 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()CVE-2024-24527.0 High
- eclipse memory analyzer, eclipse foundation memory analyzer (tools.mat) +1 moreIn Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered...CVE-2023-61942.8 Low
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486986.8 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486976.4 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486966.7 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486957.2 High
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486946.8 Medium
- azure-rtos threadx, microsoft azure rtos threadx +1 moreAzure RTOS ThreadX Remote Code Execution VulnerabilityCVE-2023-486938.7 High
- eclipse openj9Eclipse OpenJ9 possible infinite busy hangCVE-2023-56764.1 Medium
- eclipse ide, org.eclipse.core.runtime, pde +1 more +3 moreXXE in eclipse.platform / Eclipse IDECVE-2023-4218Fix available5.0 Medium
- eclipse parssonParsson DoS when parsing numbers from untrusted sourcesCVE-2023-4043Fix available5.9 Medium
- eclipse glassfishGlassfish remote code executionCVE-2023-5763Fix available6.8 Medium
- eclipse mosquittoUnconditionally adding an event to the epoll causes excessive CPU consumptionCVE-2023-5632Fix available7.5 High
- eclipse foundation rap, eclipse remote application platform +1 moreRemote Code Execution in Eclipse RAP on WindowsCVE-2023-47607.6 High
- eclipse jgitImproper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file writeCVE-2023-4759Fix available8.8 High
- eclipse mosquittoIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that...CVE-2023-0809Fix available5.8 Medium
- eclipse mosquittoIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will...CVE-2023-3592Fix available5.8 Medium
- eclipse jettyMadeYouReset HTTP/2 vulnerabilityCVE-2025-5115Fix available7.7 High
- eclipse jettyEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2025-11143Fix available3.7 Low
- eclipse jetty, netapp active iq unified manager, bootstrap os +2 moreJetty DOS vulnerability on DosFilterCVE-2024-9823Fix available5.3 Medium
- eclipse jettyJetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacksCVE-2024-8184Fix available5.9 Medium
- eclipse jettyJetty PushSessionCacheFilter can cause remote DoS attacksCVE-2024-6762Fix available3.1 Low
- Show moreLoading…