Filters
Software
eclipse jetty
35
eclipse mosquitto
23
eclipse openj9
17
eclipse theia
7
eclipse vert.x
7
eclipse californium
4
eclipse che
4
eclipse glassfish
4
eclipse kura
4
eclipse business intelligence and reporting tools
3
eclipse eclipse ide
3
eclipse memory analyzer
3
eclipse mojarra
3
eclipse cyclone data distribution service
2
eclipse cyclonedds
2
eclipse hawkbit
2
eclipse hono
2
eclipse jgit
2
eclipse keti
2
eclipse lemminx
2
eclipse omr
2
eclipse rdf4j
2
eclipse tinydtls
2
eclipse vert.x-web
2
eclipse wakaama
2
eclipse wild web developer
2
eclipse, eprosima, gurumnetworks, object computing, inc. (oci), real-time innovations (rti), twinoaks computing real-time innovations (rti) connext dds professional and connext dds secure: versions 4.2x to 6.1.0
2
eclipse, eprosima, gurumnetworks, object computing, inc. (oci), real-time innovations (rti), twinoaks computing rti connext dds micro
2
eclipse, eprosima, gurumnetworks, object computing, inc. (oci), real-time innovations (rti), twinoaks computing twinoaks computing coredx dds
2
eclipse birt
1
eclipse buildship
1
eclipse deeplearning4j
1
eclipse eclipse dataspace components
1
eclipse egit
1
eclipse equinox
1
eclipse equinox p2
1
eclipse hudson
1
eclipse ide
1
eclipse jakarta expression language
1
eclipse jersey
1
eclipse leshan
1
eclipse lyo
1
eclipse milo
1
eclipse org.eclipse.core.runtime
1
eclipse paho java client
1
eclipse paho mqtt c\/c\+\+ client
1
eclipse parsson
1
eclipse pde
1
eclipse remote application platform
1
eclipse sphinx
1
eclipse vert.x stomp
1
eclipse vorto
1
eclipse web tools platform
1
eclipse xtend
1
eclipse xtext
1
maven/org.glassfish.main.admin:rest-serviceGlassfish redirect to untrusted site
6.9
EPSS
0.04%
First published (updated )
maven/org.eclipse.edc:transfer-data-planeEclipse EDC: Consumer pull transfer token validation checks not applied
8.1
EPSS
0.06%
First published (updated )
maven/org.glassfish.main.web:web-coreEclipse Glassfish: URL redirection vulnerability to untrusted sites
6.1
EPSS
0.05%
First published (updated )
maven/io.vertx:vertx-grpc-clientEclipse Vert.x gRPC server does not limit the maximum message size
7.5
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
IBM Cognos AnalyticsEclipse OpenJ9 possible infinite busy hang
5.9
EPSS
0.04%
First published (updated )
Eclipse Eclipse IdeXXE in eclipse.platform / Eclipse IDE
First published (updated )
Eclipse ParssonParsson DoS when parsing numbers from untrusted sources
7.5
First published (updated )
Eclipse GlassFishGlassfish remote code execution
9.8
EPSS
0.12%
First published (updated )
Eclipse MosquittoUnconditionally adding an event to the epoll causes excessive CPU consumption
7.5
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.eclipse.jetty.http2:http2-hpackHTTP/2 HPACK integer overflow and buffer allocation
7.5
First published (updated )
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Eclipse MosquittoIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will me…
7.5
First published (updated )
Eclipse Remote Application PlatformRemote Code Execution in Eclipse RAP on Windows
9.8
First published (updated )
Eclipse JettyJetty's OpenId Revoked authentication allows one request
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Eclipse JettyJetty accepts "+" prefixed value in Content-Length
5.3
First published (updated )
Eclipse JettyJetty vulnerable to errant command quoting in CGI Servlet
4.3
First published (updated )
Eclipse JGitImproper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write
8.8
First published (updated )
debian/mosquittoIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that ar…
5.8
First published (updated )
Eclipse MosquittoThe broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Eclipse LeshanDDFFileParser in eclipse leshan is vulnerable to XXE Attacks
9.8
First published (updated )
IBM Cloud Pak for Business AutomationBuffer Overflow
9.1
First published (updated )
Eclipse Vert.x StompVert.x STOMP server process client frames that would not send initially a connect frame
6.5
First published (updated )
maven/org.eclipse.jetty:jetty-serverEclipse Jetty is vulnerable to a denial of service, caused by an out of memory flaw in the HttpServl…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Eclipse Business Intelligence And Reporting ToolsInput Validation
8.8
First published (updated )
IBM Cloud Pak for Business AutomationDisclosure of classpath resources on Windows when mounted on a wildcard route in vertx-web
5.3
First published (updated )
Eclipse Deeplearning4jSome Deeplearning4J packages use unclaimed s3 bucket in tests and examples
5.3
First published (updated )
Eclipse CaliforniumCalifornium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of records
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
IBM Cloud Pak for Business AutomationInput Validation
6.5
First published (updated )
Eclipse CaliforniumIn Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Eclipse Equinox P2In Eclipse p2, installable units are able to alter the Eclipse Platform installation and the local m…
10
First published (updated )
maven/org.eclipse.jetty.http2:http2-serverA flaw was found in the Eclipse Jetty http2-server package. This flaw allows an attacker to cause a …
7.5
First published (updated )
Eclipse JettyA flaw was found in the Jetty-server package. This flaw allows an attacker to send invalid requests,…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Eclipse CycloneDDSEclipse CycloneDDS Improper Handling of Syntactically Invalid Structure
9.8
First published (updated )
Eclipse CycloneDDSEclipse CycloneDDS Write-what-where Condition
9.8
First published (updated )
Oracle Java SEIn Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during byt…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Eclipse WakaamaIn Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not proper…
7.5
First published (updated )
Eclipse MosquittoIn versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of …
7.5
First published (updated )
Eclipse TheiaIn versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents ca…
6.1
First published (updated )
Eclipse Paho Mqtt C\/c\+\+ ClientIn versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len size i…
9.8
First published (updated )
redhat/javaIn Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.