Skip to contentThe Eclipse Foundation vulnerabilities
Newest
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for...CVE-2018-12551Fix available8.1 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and...CVE-2018-12550Fix available8.1 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message...CVE-2018-12546Fix available6.5 Medium
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto...CVE-2018-125489.8 Critical
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that...CVE-2018-12543Fix availableEPSS 36.0%7.5 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreModerate severity vulnerability that affects io.vertx:vertx-coreCVE-2018-12544Fix available9.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreEclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external locationCVE-2018-12542Public exploitFix available9.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreExcessive memory allocationCVE-2018-12541Fix available6.5 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, oracle enterprise manager base platform +2 moreIn Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach...CVE-2018-125397.8 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreModerate severity vulnerability that affects io.vertx:vertx-coreCVE-2018-12537Public exploitFix available5.3 Medium
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreHigh severity vulnerability that affects io.vertx:vertx-webCVE-2018-12540Public exploitFix available8.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, oracle retail xstore point of service +2 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2018-12536Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +17 more +19 moreJetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)CVE-2017-7658Fix availableEPSS 19.0%9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2017-7657Fix availableEPSS 14.4%9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +2 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2017-7656Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity management plug-ins +10 more +12 moreAccess and integrity issue within Eclipse JettyCVE-2018-12538Fix available8.8 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the...CVE-2017-7654Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreThe Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF...CVE-2017-7653Fix available5.3 Medium
- debian linux, eclipse mosquitto, the eclipse foundation eclipse mosquitto +2 moreIn Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file,...CVE-2017-7652Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM...CVE-2017-7651Public exploitFix available7.5 High