Skip to contentEclipse vulnerabilities
Newest
- eclipse ketiArbitrary Groovy script evaluation in Eclipse KetiCVE-2021-328348.2 High
- eclipse theia, the eclipse foundation eclipse theia +1 moreIn Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote...CVE-2021-344369.8 Critical
- eclipse theia, the eclipse foundation eclipse theia +1 moreRemote code execution in Eclipse TheiaCVE-2021-34435Fix available8.8 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, fedoraproject fedora +2 moreIn Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the...CVE-2021-34434Fix available5.3 Medium
- eclipse cyclone data distribution serviceA heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the...CVE-2020-187357.5 High
- eclipse cyclone data distribution serviceA stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the...CVE-2020-187347.5 High
- eclipse californium, the eclipse foundation eclipse californium +1 moreIn Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based ...CVE-2021-344337.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send...CVE-2021-34432Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with...CVE-2021-34431Fix available6.5 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 moreEncoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429Public exploitFix availableEPSS 99.3%5.3 Medium
- eclipse tinydtls, the eclipse foundation eclipse tinydtls +1 moreEclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it...CVE-2021-344307.5 High
- the eclipse foundation eclipse birt, eclipse business intelligence and reporting tools +1 moreIn Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP...CVE-2021-34427Public exploitEPSS 57.7%9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 moreSessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428Public exploitFix available2.9 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2021-28169Fix availableEPSS 78.5%5.3 Medium
- eclipse mojarra, oracle banking enterprise default management, banking platform +6 more +8 moreDirectory traversal in Eclipse MojarraCVE-2020-6950Public exploitFix availableEPSS 10.1%6.5 Medium
- eclipse jakarta expression language, the eclipse foundation jakarta expression language implementation, oracle communications cloud native core policy +2 more +4 moreImproper Input Validation in Jakarta Expression LanguageCVE-2021-28170Fix available5.3 Medium
- eclipse jersey, the eclipse foundation eclipse jersey, oracle communications cloud native core policy +1 more +3 moreLocal information disclosure via system temporary directoryCVE-2021-28168Fix available6.2 Medium
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes...CVE-2021-281676.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with...CVE-2021-28166Fix available6.5 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 moreJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resourcesCVE-2021-28165Public exploitFix availableEPSS 53.9%7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 moreAuthorization Before Parsing and Canonicalization in jettyCVE-2021-28164Public exploitFix availableEPSS 82.4%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 moreDirectory exposure in jettyCVE-2021-28163Fix available2.7 Low
- eclipse theia, the eclipse foundation eclipse theia +1 moreCommand Injection in @theia/messagesCVE-2021-28162Fix available6.1 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreImproper Neutralization of Input in Theia consoleCVE-2021-28161Fix available6.1 Medium
- eclipse platform, the eclipse foundation eclipse platform +1 moreIn versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate...CVE-2020-27225Fix available7.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 moreDOS vulnerability for Quoted Quality CSV headersCVE-2020-27223Public exploitFix availableEPSS 78.0%5.2 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreCross-site Scripting (XSS) in Eclipse TheiaCVE-2020-27224Fix available9.6 Critical
- eclipse californium, the eclipse foundation eclipse californium +1 moreIn Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS...CVE-2020-272227.5 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 up to version 0.23, there is potential for a stack-based buffer overflow when...CVE-2020-272219.8 Critical
- eclipse vert.x-webCross-Site Request Forgery in Vert.x-Web frameworkCVE-2020-35217Fix available8.8 High
- eclipse hono, the eclipse foundation eclipse hono +1 moreThe Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway...CVE-2020-272208.8 High
- eclipse hawkbit, the eclipse foundation eclipse hawkbit +1 moreCross-site Scripting in Eclipse HawkbitCVE-2020-27219Public exploitFix available6.1 Medium
- check point software technologies ltd. eclipse, eclipse che +1 moreA flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces....CVE-2020-14368Public exploit7.1 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 moreBuffer not correctly recycled in Gzip Request inflationCVE-2020-27218Fix available4.8 Medium
- eclipse hono, the eclipse foundation eclipse hono +1 moreImproper Validation of Specified Quantity in Input in Eclipse HonoCVE-2020-27217Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2020-27216Fix available7.0 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 morePath Traversal in Eclipse VertCVE-2019-17640Public exploitFix available9.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method...CVE-2019-176395.3 Medium
- eclipse web tools platform, the eclipse foundation eclipse web tools platform, debian linux +2 moreIn all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files...CVE-2019-17637Fix available7.1 High
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-17638Public exploitFix availableEPSS 11.1%9.4 Critical
- eclipse che, red hat eclipse che +1 moreMissing Authorization in Eclipse CheCVE-2020-106896.4 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreInsufficient Verification of Data Authenticity in Eclipse TheiaCVE-2019-17636Fix available8.1 High
- eclipse memory analyzer, the eclipse foundation eclipse memory analyzer +1 moreEclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability...CVE-2019-176357.8 High
- eclipse memory analyzer, the eclipse foundation eclipse memory analyzer +1 moreEclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS)...CVE-2019-176349.0 Critical
- eclipse che, the eclipse foundation eclipse che +1 moreFor Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a...CVE-2019-17633Public exploit8.8 High
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreUnescaped exception messages in error responses in JettyCVE-2019-17632Fix available6.1 Medium
- eclipse jetty, debian linux +1 moreJSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.CVE-2009-50466.1 Medium
- eclipse jetty, debian linux +1 moreDump Servlet information leak in jetty before 6.1.22.CVE-2009-50457.5 High
- eclipse wild web developer, theia xml extension project xml extension, xml language server project server project +2 moreXML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka...CVE-2019-182138.8 High
- eclipse wild web developer, theia xml extension project xml extension, xml language server project server project +2 moreXMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML...CVE-2019-182126.5 Medium
- Show moreLoading…