Where
-Infinity
0

Trending

Last week
Last month
Last year

Eclipse MosquittoEclipse Mosquito: Double free vulnerability

Risk 38
Severity
6.5
First published (updated )
CVE-2024-3935

Eclipse MosquittoEclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback

Risk 86
Severity
9.8
First published (updated )
CVE-2024-10525

Eclipse MosquittoUse After Free

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2318080

Eclipse MosquittoMemory leak

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2024-8376

debian/mosquittoIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will me…

Risk 43
Severity
7.5
First published (updated )
CVE-2023-3592
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

debian/mosquittoThe broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused…

Risk 43
Severity
7.5
First published (updated )
CVE-2023-28366

debian/mosquittoIn versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of …

Risk 43
Severity
7.5
First published (updated )
CVE-2021-41039

fedoraproject fedoraIn Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability …

Risk 27
Severity
5.3
First published (updated )
CVE-2021-34434

Eclipse MosquittoIn Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT …

Risk 38
Severity
6.5
First published (updated )
CVE-2021-34431

Eclipse MosquittoNull Pointer Dereference

Risk 38
Severity
6.5
First published (updated )
CVE-2021-28166
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Eclipse MosquittoUse After Free

Risk 34
Severity
5.5
First published (updated )
CVE-2019-11778

Debian Debian LinuxNull Pointer Dereference

Risk 43
Severity
7.5
First published (updated )
CVE-2017-7655

Eclipse MosquittoIn Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to …

Risk 38
Severity
6.5
First published (updated )
CVE-2018-12546

Eclipse MosquittoWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for aut…

Risk 75
Severity
8.1
First published (updated )
CVE-2018-12551

Eclipse MosquittoWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that A…

Risk 75
Severity
8.1
First published (updated )
CVE-2018-12550
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Eclipse MosquittoEclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set …

Risk 43
Severity
7.5
First published (updated )
CVE-2018-20145

Eclipse MosquittoInput Validation

Risk 43
Severity
7.5
First published (updated )
CVE-2018-12543

Debian Debian LinuxIn Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then …

Risk 70
Severity
7.5
First published (updated )
CVE-2017-7652

Debian Debian LinuxIn Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memo…

Risk 43
Severity
7.5
First published (updated )
CVE-2017-7651

Eclipse MosquittoInfoleak

Risk 32
Severity
5.5
First published (updated )
CVE-2017-9868
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203