Skip to contentEclipse vulnerabilities
Newest
- eclipse mosquittoIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that...CVE-2023-0809Fix available5.8 Medium
- eclipse mosquittoThe broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be...CVE-2023-28366Fix available7.5 High
- eclipse mosquittoIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will...CVE-2023-3592Fix available5.8 Medium
- eclipse jettyMadeYouReset HTTP/2 vulnerabilityCVE-2025-5115Fix available7.7 High
- eclipse jettyEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2025-11143Fix available3.7 Low
- eclipse jetty, netapp active iq unified manager, bootstrap os +2 moreJetty DOS vulnerability on DosFilterCVE-2024-9823Fix available5.3 Medium
- eclipse jettyJetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacksCVE-2024-8184Fix available5.9 Medium
- eclipse jettyJetty PushSessionCacheFilter can cause remote DoS attacksCVE-2024-6762Fix available3.1 Low
- eclipse jetty, debian linux, eclipse jetty.project +2 more +4 moreJetty connection leaking on idle timeout when TCP congestedCVE-2024-22201Fix available7.5 High
- eclipse jettyEclipse Jetty GZIP buffer releaseCVE-2024-13009Fix available7.2 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty's OpenId Revoked authentication allows one requestCVE-2023-41900Fix available3.5 Low
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty accepts "+" prefixed value in Content-LengthCVE-2023-40167Public exploitFix available5.3 Medium
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty vulnerable to errant command quoting in CGI ServletCVE-2023-36479Fix available3.5 Low
- eclipse openj9In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is...CVE-2023-25977.0 High
- eclipse vert.x stomp, vert-x3 vertx-stomp +1 moreVert.x STOMP server process client frames that would not send initially a connect frameCVE-2023-32081Fix available6.5 Medium
- eclipse jetty, debian linux, eclipse jetty.project +4 more +6 moreCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse JettyCVE-2023-26049Public exploitFix available2.4 Low
- eclipse jetty, jetty.project +1 moreOutOfMemoryError for large multipart without filename in Eclipse JettyCVE-2023-26048Public exploitFix available5.3 Medium
- eclipse business intelligence and reporting tools, the eclipse foundation eclipse birt (business intelligence reporting tool) +1 moreImproper Input Validation In Eclipse BIRTCVE-2023-0100Fix available8.8 High
- eclipse vert.x-web, vert-x3 vertx-web +1 moreDisclosure of classpath resources on Windows when mounted on a wildcard route in vertx-webCVE-2023-24815Fix available4.8 Medium
- eclipse glassfish, the eclipse foundation eclipse glassfish +1 morePath Traversal In Eclipse GlassFishCVE-2022-2712Fix available6.5 Medium
- eclipse deeplearning4jSome Deeplearning4J packages use unclaimed s3 bucket in tests and examplesCVE-2022-360225.3 Medium
- eclipse californiumCalifornium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of recordsCVE-2022-39368Fix available8.2 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type...CVE-2022-3676Fix available6.5 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflowCVE-2022-392938.6 High
- azure-rtos usbx, eclipse threadx usbx +1 moreUSBX Host CDC ECM integer underflow with buffer overflowCVE-2022-360637.6 High
- eclipse miloDenial of Service (DoS)CVE-2022-25897Fix available5.9 Medium
- eclipse sphinx, the eclipse foundation eclipse sphinx +1 moreIn Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling...CVE-2022-28385.3 Medium
- eclipse californium, the eclipse foundation eclipse californium +1 moreEclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatchCVE-2022-2576Fix available7.5 High
- eclipse hudsonHudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2CVE-2015-8031Fix available9.8 Critical
- eclipse equinox p2, the eclipse foundation eclipse equinox p2 +1 moreIn Eclipse p2, installable units are able to alter the Eclipse Platform installation and the...CVE-2021-4103710.0 Critical
- eclipse lyo, the eclipse foundation eclipse lyo +1 moreXML External Entity Reference in Eclipse LyoCVE-2021-41042Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreJetty SslConnection does not release pooled ByteBuffers in case of errorsCVE-2022-2191Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 moreJetty invalid URI parsing may produce invalid HttpURI.authorityCVE-2022-2047Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of serviceCVE-2022-2048Fix available7.5 High
- azure-rtos usbx, eclipse threadx usbx +1 morePotential buffer overflow in function DFU upload in Azure RTOS USBXCVE-2022-292469.8 Critical
- azure-rtos usbx, eclipse threadx usbx +1 moreBuffer overflow on HUB descriptor in Azure RTOS USBXCVE-2022-292237.5 High
- eclipse cycloneddsEclipse CycloneDDS Improper Handling of Syntactically Invalid StructureCVE-2021-38443Fix available6.6 Medium
- eclipse cycloneddsEclipse CycloneDDS Write-what-where ConditionCVE-2021-38441Fix available6.6 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, oracle java se +2 moreIn Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during...CVE-2021-410415.3 Medium
- eclipse lemminxPath Traversal in LemMinXCVE-2022-0673Fix available6.5 Medium
- eclipse lemminxExposure of Sensitive Information to an Unauthorized Actor in LemMinXCVE-2022-0672Fix available5.5 Medium
- eclipse wakaamaIn Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not...CVE-2021-410407.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number...CVE-2021-41039Fix available7.5 High
- eclipse theia, the eclipse foundation @theia/plugin-ext +1 moreImproper Verification of Communication Channel in @theia/plugin-extCVE-2021-41038Fix available6.1 Medium
- the eclipse foundation eclipse paho mqtt c client, eclipse paho mqtt c\/c\+\+ client +1 moreIn versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len...CVE-2021-410369.8 Critical
- eclipse openj9, eclipse foundation omr, the eclipse foundation eclipse omr +2 moreIn Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for...CVE-2021-410359.8 Critical
- eclipse che, the eclipse foundation eclipse che +1 moreThe build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an...CVE-2021-410348.1 High
- eclipse equinox, the eclipse foundation eclipse equinox +1 moreIn all released versions of Eclipse Equinox, at least until version 4.21 (September 2021),...CVE-2021-410338.1 High
- eclipse ketiGroovy Sandbox escape in Eclipse KetiCVE-2021-328359.9 Critical
- Show moreLoading…