eclipse

268 tracked vulnerabilities.

CVE-2017-7653 MEDIUM
Eclipse Mosquitto < 1.4.15 - Denial of Service via Invalid UTF-8 Topic String
Jun 05, 2018
CVSS 5.3
EPSS 0.01
CVE-2017-7652 HIGH
Eclipse Mosquitto 1.0-1.4.14 - Denial of Service via Configuration Reload
Apr 25, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-7651 HIGH
Eclipse Mosquitto < 1.4.14 - Unauthenticated Denial of Service via MQTT Connection Flood
Apr 24, 2018
CVSS 7.5
EPSS 0.05
CVE-2017-8315 HIGH
Eclipse IDE <= 2017.2.5 - XML External Entity Injection via AndroidManifest.xml
Apr 20, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-7650 MEDIUM
Mosquitto < 1.4.12 - Improper Authentication via Username/Client ID Bypass
Sep 11, 2017
CVSS 6.5
EPSS 0.02
CVE-2017-7649 CRITICAL
Eclipse Kura < 2.1.0 - Unauthenticated Remote Command Execution via Equinox Console
Sep 11, 2017
CVSS 9.8
EPSS 0.02
CVE-2017-9868 MEDIUM
Mosquitto <1.4.12 - Info Disclosure
Jun 25, 2017
CVSS 5.5
EPSS 0.00
CVE-2017-9735 HIGH
Jetty < 9.2.22 and 9.4.0-9.4.6.v20170531 - Timing Attack via Password Validation
Jun 16, 2017
CVSS 7.5
EPSS 0.06
CVE-2017-7243 HIGH
Eclipse tinydtls 0.8.2 - Denial of Service via Change Cipher Spec Packet
Mar 24, 2017
CVSS 7.5
EPSS 0.02
CVE-2016-4800 CRITICAL
Eclipse Jetty 9.3.0-9.3.8 - Improper Access Control via Path Normalization Bypass
Apr 13, 2017
CVSS 9.8
EPSS 0.06
CVE-2015-8031 CRITICAL
Hudson <3.3.2 - XML External Entity Injection
Jul 18, 2022
CVSS 9.8
EPSS 0.01
CVE-2015-2080 HIGH NUCLEI
Fedora < 9.2.9.v20150224 - Information Disclosure
Oct 07, 2016
CVSS 7.5
EPSS 0.75
CVE-2014-9390 CRITICAL
Malicious Git and Mercurial HTTP Server For CVE-2014-9390
Feb 12, 2020
CVSS 9.8
EPSS 0.63
CVE-2010-4647
Eclipse IDE < 3.6.2 - Cross-Site Scripting via Help Contents Query String
Jan 13, 2011
EPSS 0.05
CVE-2009-5046 MEDIUM
Jetty < 6.1.22 - Cross-Site Scripting in JSP Dump and Session Dump Servlet
Nov 06, 2019
CVSS 6.1
EPSS 0.02
CVE-2009-5045 HIGH
Eclipse Jetty < 6.1.22 - Information Disclosure via Dump Servlet
Nov 06, 2019
CVSS 7.5
EPSS 0.02
CVE-2009-4521
Eclipse BIRT < 2.3.2 - Cross-Site Scripting via __report Parameter
Dec 31, 2009
EPSS 0.02
CVE-2008-7271
Eclipse IDE - Cross-Site Scripting via Help Contents Search or Working Set Parameters
Jan 13, 2011
EPSS 0.02
Products
jetty 47 mosquitto 26 openj9 21 threadx_netx_duo 21 threadx_usbx 15 glassfish 12 theia 11 vert.x 10 omr 6 threadx 6 kura 5 californium 4 che 4 cyclone_data_distribution_service 4 open_vsx 4 business_intelligence_and_reporting_tools 3 eclipse_ide 3 jgit 3 memory_analyzer 3 mojarra 3 vert.x-web 3 cyclonedds 2 eclipse_dataspace_components 2 hawkbit 2 hono 2 jersey 2 keti 2 lemminx 2 openmq 2 parsson 2
Quick Filters
Critical CVEs With Exploits In CISA KEV