Skip to contentEclipse vulnerabilities
Newest
- eclipse glassfishGlassFish's Administration Console is Vulnerable to RCECVE-2026-2586Public exploitFix available9.1 Critical
- eclipse glassfishGlassFish's gadget handler is vulnerable to RCECVE-2026-2587Public exploitFix available9.6 Critical
- eclipse vert.xVert.x has a DoS via unbounded server-side SNI SslContext cache growthCVE-2026-6860Fix available6.9 Medium
- eclipse openj9, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 moreRed Hat Security Advisory: java-21-ibm-semeru-certified-jdk security updateCVE-2026-69188.7 High
- eclipse equinox osgiEclipse Equinox OSGi 3.7.2 Remote Code Execution via ConsoleCVE-2023-543449.3 Critical
- eclipse equinox osgiEclipse Equinox OSGi 3.8-3.18 Console Remote Code ExecutionCVE-2023-543429.3 Critical
- eclipse jetty, red hat hawtio hawtio 4.4.0, openshift developer tools and services +39 more +41 moreHTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-2332Public exploitFix available7.4 High
- eclipse jetty, red hat hawtio hawtio 4.4.0, build of apache camel 4.18.1 for spring boot 3.5.14 +6 more +8 moreDuplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variablesCVE-2026-5795Fix available7.4 High
- eclipse openmq, eclipse foundation glassfish +1 moreAn unsafe parsing of OpenMQ's configuration, allows a remote attacker to read arbitrary files...CVE-2026-244579.1 Critical
- eclipse jetty, red hat hawtio hawtio 4.4.0, openshift developer tools and services +35 more +37 moreThe Eclipse Jetty Server Artifact has a Gzip request memory leakCVE-2026-1605Fix available7.5 High
- eclipse openmqOpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires...CVE-2026-228869.8 Critical
- eclipse theia website, eclipse foundation theia - website +1 moreIn the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview...CVE-2026-1699Public exploit10.0 Critical
- eclipse omrIn the Eclipse OMR port library component since release 0.2.0, an API function to return the...CVE-2026-1188Fix available6.9 Medium
- eclipse threadxThe vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get_…CVE-2026-06487.8 High
- eclipse threadx usbx, eclipse foundation threadx - usbx +1 moreThe function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursi…CVE-2025-550954.2 Medium
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreA denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source…CVE-2025-551028.7 High
- eclipse foundation vert.x, eclipse vert.x-web +1 moreEclipse Vert.x Web static handler file access denialCVE-2026-1002Fix available6.9 Medium
- eclipse cyclone data distribution serviceImproper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows...CVE-2025-6710910.0 Critical
- eclipse omrOMR on Z processors Exposing a possible buffer over-read problemCVE-2025-145496.9 Medium
- eclipse paho mqtt, eclipse foundation paho.mqtt.golang (go mqtt v3.1 library) +1 moreEclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytesCVE-2025-10543Fix available6.3 Medium
- eclipse jerseyRace Condition allows Bypass of Trust RestrictionsCVE-2025-12383Fix available9.4 Critical
- eclipse vert.xVert.x-Web Access Control Flaw in StaticHandler’s Hidden File Protection for Files Under Hidden DirectoriesCVE-2025-11965Fix available6.3 Medium
- eclipse vert.xVert.x-Web vulnerable to Stored Cross-site Scripting in directory listings via file namesCVE-2025-11966Fix available2.3 Low
- eclipse threadx netx duo, eclipse foundation nextx duo +1 moreIn NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a…CVE-2025-550866.3 Medium
- eclipse threadx netx duo, eclipse foundation netx duo +1 moreWeb http client: Unchecked Server-Side Malicious Packet IssueCVE-2025-550858.8 High
- eclipse foundation nextx duo, eclipse threadx netx duo +1 moreIn NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.CVE-2025-550876.3 Medium
- eclipse foundation usbx, eclipse threadx usbx +1 morePotential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()CVE-2025-551002.4 Low
- eclipse foundation usbx, eclipse threadx usbx +1 morePotential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()CVE-2025-550992.4 Low
- eclipse foundation usbx, eclipse threadx usbx +1 morePotential out-of-bounds read in _ux_host_class_audio_device_type_get()CVE-2025-550981.0 Low
- eclipse foundation usbx, eclipse threadx usbx +1 morePotential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get()CVE-2025-550972.4 Low
- eclipse threadx usbx, eclipse foundation netx duo +1 moreInadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()CVE-2025-550962.1 Low
- eclipse foundation netx duo, eclipse threadx netx duo +1 morePotential out-of-bounds read in _nx_icmpv6_validate_options()CVE-2025-550946.9 Medium
- eclipse foundation netx duo, eclipse threadx netx duo +1 moreOut of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messagesCVE-2025-550936.9 Medium
- eclipse foundation netx duo, eclipse threadx netx duo +1 morePotential out of bound read in _nx_ipv4_option_process()CVE-2025-550926.9 Medium
- eclipse foundation netx duo, eclipse threadx netx duo +1 morePotential out of bound read in _nx_ip_packet_receive()CVE-2025-550916.9 Medium
- eclipse foundation netx duo, eclipse threadx netx duo +1 morePotential out of bound read issue in _nx_ipv4_packet_receive() in NetX DuoCVE-2025-550906.9 Medium
- eclipse threadx filex, eclipse foundation filex +1 moreEclipse ThreadX FileX RAM disk driver buffer overflowCVE-2025-550899.2 Critical
- eclipse foundation netx duo, eclipse threadx netx duo +1 moreOut of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()CVE-2025-550846.9 Medium
- eclipse foundation netx duo, eclipse threadx netx duo +1 moreBroken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension()CVE-2025-550836.9 Medium
- eclipse foundation netx duo, eclipse threadx netx duo +1 morePotential out of bound read and info leak in_nx_secure_tls_psk_identity_find()CVE-2025-550826.9 Medium
- eclipse threadx netx duo, eclipse foundation netx duo +1 morePotential out of bound read in _nx_secure_tls_process_clienthello()CVE-2025-550816.9 Medium
- eclipse threadxImproper Parameter Check in ThreadX Syscall ImplementationCVE-2025-550807.2 High
- eclipse threadxMissing check for thread priorityCVE-2025-550795.7 Medium
- eclipse threadxIncomplete validation of kernel object pointers in system callsCVE-2025-550785.7 Medium
- eclipse jakarta mail, angus mail +1 moreJakarta Mail vulnerable to SMTP InjectionCVE-2025-7962Fix available6.0 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpointsCVE-2024-94088.9 High
- eclipse glassfishEclipse GlassFish is vulnerable to Stored XSS attacks through its Administration ConsoleCVE-2024-100326.1 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modificationsCVE-2024-100315.8 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration ConsoleCVE-2024-100294.5 Medium
- eclipse glassfishEclipse GlassFish is vulnerable to Stored XSS attacks through its Administration ConsoleCVE-2024-93436.1 Medium
- Show moreLoading…