Skip to contentEclipse vulnerabilities
Newest
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +5 more +7 moreFrom Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or...CVE-2019-176319.1 Critical
- eclipse mojarra, oracle mojarra javaserver faces, application testing suite +20 more +22 moreCross-site Scripting in Eclipse MojarraCVE-2019-17091Fix available6.1 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIf an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last...CVE-2019-11778Fix available5.4 Medium
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to...CVE-2019-117747.4 High
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection...CVE-2019-117737.8 High
- eclipse paho java client, the eclipse foundation eclipse paho +1 moreImproper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client libraryCVE-2019-11777Fix available7.5 High
- the eclipse foundation eclipse birt, eclipse business intelligence and reporting tools +1 moreIn Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter....CVE-2019-117766.1 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreAll builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to...CVE-2019-117757.4 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not...CVE-2019-117729.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreAIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code...CVE-2019-117717.8 High
- eclipse buildship, the eclipse foundation eclipse buildship +1 moreIn Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is...CVE-2019-117708.1 High
- eclipse xtend, xtext, the eclipse foundation eclipse xtext +2 morePotentially compromised buildsCVE-2019-10249Fix available8.1 High
- eclipse vorto, the eclipse foundation eclipse vorto +1 moreEclipse Vorto resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPSCVE-2019-10248Fix available8.1 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 moreInformation Exposure vulnerability in Eclipse JettyCVE-2019-10246Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-10241Fix available6.1 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 moreIn Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...CVE-2019-102457.5 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis...CVE-2019-102447.5 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its...CVE-2019-102435.3 Medium
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during...CVE-2019-102425.3 Medium
- eclipse hawkbit, the eclipse foundation eclipse hawkbit +1 moreCleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBitCVE-2019-10240Fix available8.1 High
- eclipse jetty, the eclipse foundation eclipse jetty, fedoraproject fedora +2 moreUncontrolled Resource Consumption in org.eclipse.jetty:jetty-serverCVE-2018-12545Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in...CVE-2017-7655Fix available7.5 High
- eclipse wakaamaIn Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the...CVE-2019-90047.5 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on...CVE-2018-125499.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native...CVE-2018-125479.8 Critical
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for...CVE-2018-12551Fix available8.1 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and...CVE-2018-12550Fix available8.1 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message...CVE-2018-12546Fix available6.5 Medium
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto...CVE-2018-125489.8 Critical
- eclipse rdf4jRDF4J vulnerable to zip slipCVE-2018-20227Fix available7.5 High
- eclipse mosquittoEclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was...CVE-2018-20145Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that...CVE-2018-12543Fix availableEPSS 36.0%7.5 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreModerate severity vulnerability that affects io.vertx:vertx-coreCVE-2018-12544Fix available9.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreEclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external locationCVE-2018-12542Public exploitFix available9.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreExcessive memory allocationCVE-2018-12541Fix available6.5 Medium
- eclipse rdf4jEclipse RDF4j vulnerable to XML External EntityCVE-2018-1000644Fix available10.0 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, oracle enterprise manager base platform +2 moreIn Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach...CVE-2018-125397.8 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreModerate severity vulnerability that affects io.vertx:vertx-coreCVE-2018-12537Public exploitFix available5.3 Medium
- eclipse mojarraPath Traversal in Eclipse MojarraCVE-2018-14371Fix available7.5 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreHigh severity vulnerability that affects io.vertx:vertx-webCVE-2018-12540Public exploitFix available8.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, oracle retail xstore point of service +2 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2018-12536Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +17 more +19 moreJetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)CVE-2017-7658Fix availableEPSS 19.0%9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2017-7657Fix availableEPSS 14.4%9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +2 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2017-7656Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity management plug-ins +10 more +12 moreAccess and integrity issue within Eclipse JettyCVE-2018-12538Fix available8.8 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the...CVE-2017-7654Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreThe Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF...CVE-2017-7653Fix available5.3 Medium
- check point software technologies ltd. eclipse, eclipse ide +1 moreEclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an...CVE-2017-8315Fix available7.5 High
- Show moreLoading…