Skip to contentEclipse vulnerabilities
Newest
- eclipse glassfishEclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attemptsCVE-2024-93426.3 Medium
- eclipse open vsx, eclipse foundation open vsx registry, openvsx +2 moreOn open-vsx.org http://open-vsx.org/ it was possible to run an arbitrary build scripts for auto...CVE-2025-67057.6 High
- eclipse jgitXXE vulnerability in Eclipse JGitCVE-2025-4949Fix available6.8 Medium
- eclipse openj9Buffer Overflow in Eclipse OpenJ9CVE-2025-4447Fix available7.0 High
- eclipse jettyEclipse Jetty HTTP clients can increase memory allocationCVE-2025-1948Fix available7.5 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo component HTTP server single PUT request integer underflowCVE-2025-22595.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP component server denial of serviceCVE-2025-22607.1 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-22585.3 Medium
- eclipse cyclone data distribution service, eclipse foundation cyclone dds +1 moreInteger Underflow in DDS_Security_Deserialize_ methods may lead to OOB readCVE-2024-108388.8 High
- eclipse omrEclipse OMR: Buffer overflow vulnerabilityCVE-2025-14717.1 High
- eclipse omrEclipse OMR: Null pointer dereference vulnerabilityCVE-2025-14705.1 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-07275.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-07285.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server denial of serviceCVE-2025-07267.1 High
- eclipse foundation openvsx, eclipse open vsx +1 moreImproper Authorization in /user/namespace/{namespace}/detailsCVE-2025-10076.9 Medium
- eclipse openj9, eclipse foundation open j9 +1 moreEclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLengthCVE-2024-109173.7 Low
- eclipse mosquittoEclipse Mosquito: Double free vulnerabilityCVE-2024-3935Fix available6.0 Medium
- eclipse mosquittoEclipse Mosquito: Heap Buffer Overflow in my_subscribe_callbackCVE-2024-10525Fix availableEPSS 59.2%7.2 High
- eclipse jettyJetty URI parsing of invalid authorityCVE-2024-6763Fix available3.7 Low
- eclipse mosquittoMemory leakCVE-2024-8376Fix available7.2 High
- eclipse glassfishGlassfish redirect to untrusted siteCVE-2024-9329Fix available6.9 Medium
- eclipse dataspace componentsEDC DataSetResolver policy filtering missingCVE-2024-92025.3 Medium
- eclipse dataspace components, eclipse foundation edc, edc connector +2 moreEclipse EDC: Consumer pull transfer token validation checks not appliedCVE-2024-8642Fix available5.0 Medium
- eclipse glassfishEclipse Glassfish: URL redirection vulnerability to untrusted sitesCVE-2024-8646Fix available6.1 Medium
- eclipse vert.xEclipse Vert.x gRPC server does not limit the maximum message sizeCVE-2024-8391Fix available6.9 Medium
- eclipse honoHono CSRF middleware can be bypassed using crafted Content-Type headerCVE-2024-43787Fix available5.0 Medium
- eclipse parssonEclipse Parsson stack overflow with deeply nested objectsCVE-2023-7272Fix available8.6 High
- eclipse openj9, eclipse foundation open j9 +1 moreEclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a bufferCVE-2024-39335.3 Medium
- eclipse dittoEclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of InputCVE-2024-5165Fix available6.5 Medium
- eclipse edc connector, eclipse foundation edc +1 moreEclipse EDC: OAuth2 Credential Exfiltration VulnerabilityCVE-2024-4536Fix available6.8 Medium
- eclipse ide, target management +1 moreEclipse Target Management <= 4.5.500 Command InjectionCVE-2024-07409.8 Critical
- eclipse kuraEclipse Kura LogServlet vulnerabilityCVE-2024-30467.5 High
- eclipse threadxInteger wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()CVE-2024-22127.3 High
- eclipse threadxMissing array size check in _Mtxinit() in the Xtensa portCVE-2024-22147.0 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()CVE-2024-24527.0 High
- eclipse memory analyzer, eclipse foundation memory analyzer (tools.mat) +1 moreIn Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered...CVE-2023-61942.8 Low
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486986.8 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486976.4 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486966.7 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486957.2 High
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Remote Code Execution VulnerabilityCVE-2023-486946.8 Medium
- eclipse openj9Eclipse OpenJ9 possible infinite busy hangCVE-2023-56764.1 Medium
- eclipse ide, org.eclipse.core.runtime, pde +1 more +3 moreXXE in eclipse.platform / Eclipse IDECVE-2023-4218Fix available5.0 Medium
- eclipse parssonParsson DoS when parsing numbers from untrusted sourcesCVE-2023-4043Fix available5.9 Medium
- eclipse glassfishGlassfish remote code executionCVE-2023-5763Fix available6.8 Medium
- eclipse mosquittoUnconditionally adding an event to the epoll causes excessive CPU consumptionCVE-2023-5632Fix available7.5 High
- eclipse jetty, debian linux, eclipse jetty.project +1 more +3 moreHTTP/2 HPACK integer overflow and buffer allocationCVE-2023-36478Fix available7.5 High
- eclipse foundation rap, eclipse remote application platform +1 moreRemote Code Execution in Eclipse RAP on WindowsCVE-2023-47607.6 High
- eclipse jgitImproper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file writeCVE-2023-4759Fix available8.8 High
- eclipse leshanDDFFileParser in eclipse leshan is vulnerable to XXE AttacksCVE-2023-41034Fix available6.5 Medium
- Show moreLoading…