{"items":[{"id":"CVE-2026-123059","published":"2026-11-05T13:13:17.917Z","updated":"2026-11-05T21:24:55.109Z","title":"Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx Helm Charts","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2026-123047","published":"2026-11-05T12:11:12.591Z","updated":"2026-11-05T19:03:36.145Z","title":"Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx Helm Charts","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2026-120421","published":"2026-11-04T15:12:11.190Z","updated":"2026-11-04T20:00:57.838Z","title":"Reflected XSS via client window id in URL client window mode","severity":"MEDIUM","score":6.1,"vendor":"Eclipse Foundation","product":"Eclipse Mojarra","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2026-118487","published":"2026-11-03T15:27:18.304Z","updated":"2026-11-03T15:45:31.203Z","title":"Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00664,"kevAdded":null},{"id":"CVE-2026-118488","published":"2026-11-03T15:13:17.354Z","updated":"2026-11-03T18:04:57.987Z","title":"Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client","severity":"MEDIUM","score":5.9,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2026-118489","published":"2026-11-03T14:55:48.515Z","updated":"2026-11-03T18:09:32.017Z","title":"CachingWebClient shares user-specific HTTP responses across users via the shared cache tier","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2026-89295","published":"2026-11-03T13:30:36.745Z","updated":"2026-11-06T19:53:55.298Z","title":"Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Mnestix","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2026-89293","published":"2026-11-03T09:38:23.426Z","updated":"2026-11-03T20:21:20.284Z","title":"Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse Mnestix","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2026-89292","published":"2026-11-03T09:31:27.136Z","updated":"2026-11-03T20:19:27.496Z","title":"Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures","severity":"CRITICAL","score":9.2,"vendor":"Eclipse Foundation","product":"Eclipse Mnestix","kev":false,"epss":0.00453,"kevAdded":null},{"id":"CVE-2026-92610","published":"2026-11-03T08:42:54.156Z","updated":"2026-11-06T18:44:07.455Z","title":"Improper limitation of paths in py-aspect-model-loader","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse Semantic Modeling Framework (ESMF)","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2026-113421","published":"2026-11-03T08:27:59.776Z","updated":"2026-11-03T20:10:26.990Z","title":"ThreadX Modules invokes trace-full callbacks after module unload","severity":"HIGH","score":7.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2026-115231","published":"2026-11-03T08:23:02.270Z","updated":"2026-11-03T20:09:19.566Z","title":"User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2026-115215","published":"2026-11-02T21:43:53.639Z","updated":"2026-11-06T17:58:51.590Z","title":"NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-115403","published":"2026-11-02T21:40:21.778Z","updated":"2026-11-06T17:58:08.502Z","title":"NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2026-115654","published":"2026-11-02T15:15:38.606Z","updated":"2026-11-02T16:15:53.201Z","title":"User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2026-115653","published":"2026-11-02T15:10:18.233Z","updated":"2026-11-02T16:17:31.540Z","title":"Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2026-114408","published":"2026-11-02T15:04:39.505Z","updated":"2026-11-04T13:32:15.724Z","title":"NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2026-118052","published":"2026-11-02T14:57:27.483Z","updated":"2026-11-02T16:19:56.290Z","title":"Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-114278","published":"2026-10-28T11:55:05.600Z","updated":"2026-11-05T18:25:29.572Z","title":"Unauthenticated Command Injection via kubeconfig Username in che-machine-exec","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse Che","kev":false,"epss":0.00899,"kevAdded":null},{"id":"CVE-2026-115408","published":"2026-10-27T11:55:15.600Z","updated":"2026-11-04T16:49:17.062Z","title":"ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets","severity":"MEDIUM","score":5.5,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-113644","published":"2026-10-27T11:43:28.824Z","updated":"2026-11-04T17:14:46.989Z","title":"iofogctl command injection via Controller provisioning response","severity":"MEDIUM","score":5.5,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2026-115216","published":"2026-10-27T11:34:47.619Z","updated":"2026-11-04T17:13:31.877Z","title":"Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2026-89320","published":"2026-10-23T08:56:20.140Z","updated":"2026-11-02T13:29:45.468Z","title":"HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K(\"\") for all inputs, voiding CBC-HMAC JWE integrity","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2026-89319","published":"2026-10-23T08:54:37.681Z","updated":"2026-11-02T13:22:22.590Z","title":"JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-89318","published":"2026-10-23T08:51:55.194Z","updated":"2026-11-02T13:18:54.247Z","title":"JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2026-89317","published":"2026-10-23T08:50:22.987Z","updated":"2026-11-02T13:17:29.417Z","title":"JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2026-89316","published":"2026-10-23T08:48:08.682Z","updated":"2026-11-02T13:16:12.850Z","title":"LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-89315","published":"2026-10-23T08:46:30.146Z","updated":"2026-11-02T12:59:14.783Z","title":"JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-89314","published":"2026-10-23T08:43:38.475Z","updated":"2026-11-02T12:51:43.036Z","title":"Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2026-89313","published":"2026-10-23T08:40:55.499Z","updated":"2026-11-02T12:49:31.095Z","title":"JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2026-89312","published":"2026-10-23T08:36:53.971Z","updated":"2026-11-02T12:46:35.266Z","title":"AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2026-110938","published":"2026-10-21T08:03:26.062Z","updated":"2026-10-26T17:57:34.803Z","title":"JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00415,"kevAdded":null},{"id":"CVE-2026-111075","published":"2026-10-21T08:00:32.804Z","updated":"2026-10-26T17:57:34.946Z","title":"JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-111074","published":"2026-10-21T07:57:16.912Z","updated":"2026-10-26T17:57:35.098Z","title":"JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2026-93003","published":"2026-10-20T15:24:53.662Z","updated":"2026-10-20T17:06:47.687Z","title":"NetX Duo Web HTTP server interprets request body content as HTTP header fields","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2026-95107","published":"2026-10-20T15:20:15.011Z","updated":"2026-10-20T17:05:35.811Z","title":"Module object allocation size overflow corrupts the manager object pool","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2026-94202","published":"2026-10-20T15:19:43.014Z","updated":"2026-10-20T17:04:52.595Z","title":"Module block-pool create validates two of the four parameter words it reads","severity":"MEDIUM","score":4.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2026-95108","published":"2026-10-20T15:19:16.940Z","updated":"2026-10-20T17:06:10.079Z","title":"Deleting a user-mode module thread leaks its privileged kernel stack","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-94024","published":"2026-10-20T15:18:28.242Z","updated":"2026-10-20T17:01:07.513Z","title":"Module Manager object lookup validates one byte of a module's search name","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-94023","published":"2026-10-20T15:18:09.957Z","updated":"2026-10-20T17:03:48.170Z","title":"Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2026-95109","published":"2026-10-20T15:17:20.023Z","updated":"2026-10-20T17:07:15.973Z","title":"Cortex-A7 module data validation checks only the first address of a caller-supplied range","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2026-94192","published":"2026-10-20T15:15:06.222Z","updated":"2026-10-20T17:04:24.537Z","title":"Module object deallocation can free a live ThreadX kernel object","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2026-92843","published":"2026-10-20T15:12:55.919Z","updated":"2026-10-20T17:08:35.381Z","title":"Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2026-92853","published":"2026-10-20T15:10:08.102Z","updated":"2026-10-20T17:02:19.980Z","title":"Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2026-94018","published":"2026-10-20T15:10:08.098Z","updated":"2026-10-20T17:03:21.440Z","title":"NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2026-93475","published":"2026-10-20T15:04:30.044Z","updated":"2026-10-20T17:02:52.372Z","title":"Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509","severity":"CRITICAL","score":9.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2026-91057","published":"2026-10-20T15:01:30.043Z","updated":"2026-10-20T17:01:50.314Z","title":"Out-of-bounds read when a multi-line text view string ends with a carriage return","severity":"MEDIUM","score":4.6,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2026-92454","published":"2026-10-20T14:58:36.821Z","updated":"2026-10-20T15:21:42.800Z","title":"JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2026-91059","published":"2026-10-20T14:54:37.119Z","updated":"2026-10-20T15:24:14.860Z","title":"JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2026-91189","published":"2026-10-20T14:53:44.860Z","updated":"2026-10-20T15:25:24.066Z","title":"GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2026-92446","published":"2026-10-20T14:52:45.765Z","updated":"2026-10-20T15:26:36.082Z","title":"GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2026-92449","published":"2026-10-20T14:51:24.582Z","updated":"2026-10-20T15:27:55.848Z","title":"Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2026-91186","published":"2026-10-20T14:47:52.216Z","updated":"2026-10-20T15:28:59.237Z","title":"PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2026-95111","published":"2026-10-20T14:35:40.629Z","updated":"2026-10-20T15:34:45.488Z","title":"Module queue front-send validates a word count as a byte count","severity":"MEDIUM","score":4.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-96402","published":"2026-10-20T14:31:34.182Z","updated":"2026-10-20T15:36:16.427Z","title":"USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count","severity":"MEDIUM","score":5.2,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - USBX","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-97400","published":"2026-10-20T14:08:17.229Z","updated":"2026-10-20T15:39:43.964Z","title":"jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2026-96406","published":"2026-10-20T13:17:37.426Z","updated":"2026-10-20T15:28:49.518Z","title":"VIDEO class descriptor walk consumes device-controlled wTotalLength as its bound","severity":"MEDIUM","score":4.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX -  USBX","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2026-96582","published":"2026-10-20T13:13:39.177Z","updated":"2026-10-20T15:29:25.262Z","title":"Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser","severity":"MEDIUM","score":4.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - USBX","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2026-91041","published":"2026-10-20T13:10:14.903Z","updated":"2026-10-20T15:30:22.550Z","title":"FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image","severity":"HIGH","score":7.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - FileX","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2026-113620","published":"2026-10-20T12:34:08.238Z","updated":"2026-10-20T15:33:16.426Z","title":"Eclipse ioFog operator WebSocket accepts an unverified JWT","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2026-113619","published":"2026-10-20T12:23:27.962Z","updated":"2026-10-20T15:35:01.372Z","title":"Eclipse ioFog renders request templates before authentication","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2026-107597","published":"2026-10-20T10:06:37.127Z","updated":"2026-10-20T15:36:50.392Z","title":"jwks_uri from the OIDC discovery document is fetched without checking its origin or scheme","severity":"MEDIUM","score":5.1,"vendor":"Eclipse Foundation","product":"Eclipse CSI - PIA","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2026-108062","published":"2026-10-20T10:04:35.382Z","updated":"2026-10-20T15:41:39.646Z","title":"Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse CSI - PIA","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2026-93649","published":"2026-10-15T13:28:42.590Z","updated":"2026-10-16T18:46:25.952Z","title":"In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Adoptium Temurin","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2026-110723","published":"2026-10-15T12:14:08.140Z","updated":"2026-10-15T13:11:12.574Z","title":"In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Connected Services Platform","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2026-110724","published":"2026-10-15T12:11:22.470Z","updated":"2026-10-16T18:43:57.741Z","title":"In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Connected Services Platform","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2026-110726","published":"2026-10-15T11:58:03.903Z","updated":"2026-10-15T15:30:14.212Z","title":"In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element…","severity":"MEDIUM","score":6.5,"vendor":"Eclipse Foundation","product":"Eclipse Connected Services Platform","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2026-18659","published":"2026-10-15T09:44:11.148Z","updated":"2026-10-15T13:26:19.435Z","title":"Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty.ee11:jetty-ee11-servlet","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-18662","published":"2026-10-15T09:42:40.638Z","updated":"2026-10-15T13:28:30.423Z","title":"In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty.ee11:jetty-ee11-servlet","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2026-19864","published":"2026-10-15T09:41:25.133Z","updated":"2026-10-15T13:29:54.581Z","title":"Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the…","severity":"MEDIUM","score":5.6,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty:jetty-security","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2026-19863","published":"2026-10-15T09:39:26.083Z","updated":"2026-10-15T13:30:53.073Z","title":"An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This…","severity":"CRITICAL","score":9.3,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty:jetty-ethereum","kev":false,"epss":0.00503,"kevAdded":null},{"id":"CVE-2026-18660","published":"2026-10-15T09:38:02.125Z","updated":"2026-10-15T13:32:37.345Z","title":"Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty:jetty-server","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2026-18661","published":"2026-10-15T09:01:28.668Z","updated":"2026-10-15T13:46:37.040Z","title":"In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed…","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty.ee11:jetty-ee11-annotations","kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2026-77711","published":"2026-10-15T08:51:48.066Z","updated":"2026-10-15T13:50:52.566Z","title":"When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2026-76184","published":"2026-10-15T08:46:54.683Z","updated":"2026-10-15T13:51:45.344Z","title":"In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2026-76182","published":"2026-10-15T08:40:58.439Z","updated":"2026-10-15T13:59:12.521Z","title":"In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00345,"kevAdded":null},{"id":"CVE-2026-102477","published":"2026-10-15T08:28:25.876Z","updated":"2026-10-15T14:16:51.106Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2026-102464","published":"2026-10-15T08:26:02.688Z","updated":"2026-10-15T14:19:05.000Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2026-102461","published":"2026-10-15T08:23:54.256Z","updated":"2026-10-16T18:40:19.187Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2026-103224","published":"2026-10-15T08:22:18.498Z","updated":"2026-10-16T18:51:17.848Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-103223","published":"2026-10-15T08:20:03.749Z","updated":"2026-10-15T14:26:35.477Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-102466","published":"2026-10-15T08:15:32.883Z","updated":"2026-10-15T14:24:55.316Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2026-102463","published":"2026-10-15T08:13:41.485Z","updated":"2026-10-15T14:27:43.560Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2026-102469","published":"2026-10-15T08:11:33.465Z","updated":"2026-10-15T14:28:47.479Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA…","severity":"CRITICAL","score":9.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2026-102462","published":"2026-10-15T08:09:36.396Z","updated":"2026-10-15T14:33:16.044Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-102465","published":"2026-10-15T07:27:55.055Z","updated":"2026-10-15T14:34:24.521Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2026-102475","published":"2026-10-15T07:24:09.062Z","updated":"2026-10-15T14:35:42.319Z","title":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-102467","published":"2026-10-15T07:19:57.248Z","updated":"2026-10-15T14:37:49.556Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a maximum number…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-102471","published":"2026-10-14T18:50:21.647Z","updated":"2026-10-14T19:49:35.803Z","title":"CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2026-102479","published":"2026-10-14T18:43:54.623Z","updated":"2026-10-28T21:06:12.367Z","title":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers,…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-102460","published":"2026-10-14T18:36:41.358Z","updated":"2026-10-19T14:14:48.527Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's…","severity":"HIGH","score":8.6,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2026-102476","published":"2026-10-14T18:11:45.277Z","updated":"2026-10-16T18:20:31.341Z","title":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key…","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2026-106465","published":"2026-10-14T17:47:11.013Z","updated":"2026-11-04T13:23:55.487Z","title":"Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2026-106464","published":"2026-10-14T17:41:43.585Z","updated":"2026-11-04T13:20:59.238Z","title":"Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2026-103415","published":"2026-10-14T17:36:17.620Z","updated":"2026-10-16T20:12:39.252Z","title":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the…","severity":"CRITICAL","score":9.3,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00284,"kevAdded":null},{"id":"CVE-2026-103414","published":"2026-10-14T17:32:12.095Z","updated":"2026-10-16T20:10:44.107Z","title":"The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"GUIX","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2026-92877","published":"2026-10-12T14:19:28.195Z","updated":"2026-10-16T17:05:38.314Z","title":"The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution. On JAXP implementations…","severity":"HIGH","score":8.3,"vendor":"Eclipse Foundation","product":"jaxb-ri (core)","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2026-107503","published":"2026-10-08T09:32:47.485Z","updated":"2026-10-15T13:09:30.155Z","title":"In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI…","severity":"HIGH","score":7.1,"vendor":"Eclipse Ditto","product":"Ditto Explorer UI","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-103416","published":"2026-10-07T08:55:12.097Z","updated":"2026-10-07T18:04:27.490Z","title":"Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the…","severity":"CRITICAL","score":9.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2026-86671","published":"2026-10-05T16:21:57.738Z","updated":"2026-10-05T19:03:35.456Z","title":"In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse Che","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2026-101322","published":"2026-10-01T16:00:50.688Z","updated":"2026-10-01T16:15:41.152Z","title":"In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's…","severity":"HIGH","score":8.3,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx AAS Web UI","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-102717","published":"2026-09-30T14:31:22.786Z","updated":"2026-09-30T20:00:26.657Z","title":"MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-102730","published":"2026-09-29T17:59:30.553Z","updated":"2026-11-04T13:28:19.188Z","title":"Out-of-bounds Write via NAND Metadata Parsing at Mount in LevelX","severity":"HIGH","score":8.6,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2026-102729","published":"2026-09-29T17:58:45.234Z","updated":"2026-09-29T18:26:36.721Z","title":"`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id. A theme id…","severity":"MEDIUM","score":5.9,"vendor":"Eclipse Foundation","product":"GUIX","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2026-102727","published":"2026-09-29T17:57:37.322Z","updated":"2026-11-04T10:38:17.017Z","title":"FTP Passive Data Connection Not Bound to the Authenticated Control Peer","severity":"MEDIUM","score":6,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00239,"kevAdded":null},{"id":"CVE-2026-102728","published":"2026-09-29T17:55:18.761Z","updated":"2026-11-04T10:45:44.809Z","title":"Out-of-bounds reads in NetX Secure client-side handshake parsing (ServerHello and HelloVerifyRequest)","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2026-102726","published":"2026-09-29T17:51:48.598Z","updated":"2026-11-04T10:35:10.543Z","title":"Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2026-102725","published":"2026-09-29T17:51:03.858Z","updated":"2026-11-04T10:31:53.318Z","title":"Out-of-bounds Read from Unvalidated MSRP Attribute List Length","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2026-102724","published":"2026-09-29T17:49:52.455Z","updated":"2026-11-04T10:28:13.150Z","title":"NULL pointer dereference when evicting the last MSRP attribute in a participant's list","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2026-102723","published":"2026-09-29T17:48:42.321Z","updated":"2026-11-04T10:19:45.082Z","title":"NULL Pointer Dereference on MSRP Attribute Table Exhaustion","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2026-102722","published":"2026-09-29T17:47:56.018Z","updated":"2026-11-04T09:50:18.031Z","title":"The FTP client trusts arbitrary IP addresses in the PASV server response","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00239,"kevAdded":null},{"id":"CVE-2026-102721","published":"2026-09-29T17:47:12.769Z","updated":"2026-11-04T09:45:51.393Z","title":"TFTP client and server copy the ERROR packet message without bounding the read against the packet","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-102720","published":"2026-09-29T17:46:23.228Z","updated":"2026-11-04T09:42:34.150Z","title":"DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options buffer","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2026-102719","published":"2026-09-29T17:45:21.609Z","updated":"2026-11-04T09:36:15.185Z","title":"NetX Secure DTLS server issues predictable HelloVerifyRequest cookies, so a spoofed client can pass the return-routability check","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-102718","published":"2026-09-29T17:44:43.914Z","updated":"2026-11-04T13:18:33.678Z","title":"Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2026-102716","published":"2026-09-29T17:43:55.870Z","updated":"2026-11-04T13:15:37.718Z","title":"A malformed Session header permanently orphans one packet-pool block per RTSP request","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-102715","published":"2026-09-29T17:42:35.719Z","updated":"2026-11-04T13:11:27.951Z","title":"mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-102714","published":"2026-09-29T17:41:28.517Z","updated":"2026-11-04T13:06:47.699Z","title":"ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permanent loop","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2026-102713","published":"2026-09-29T17:40:40.067Z","updated":"2026-11-04T13:03:50.427Z","title":"Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stall","severity":"HIGH","score":8.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-102712","published":"2026-09-29T17:39:31.083Z","updated":"2026-11-04T11:06:39.363Z","title":"Out-of-bounds read in the NetX Secure DTLS ClientHello parser","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-102711","published":"2026-09-29T17:38:22.171Z","updated":"2026-11-04T09:29:28.955Z","title":"Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2026-102710","published":"2026-09-29T17:37:04.556Z","updated":"2026-11-03T16:17:16.840Z","title":"In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a user-mode, memory-protected module register…","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-102709","published":"2026-09-29T17:36:17.135Z","updated":"2026-11-03T16:06:06.478Z","title":"In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports dereference a thread…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2026-102762","published":"2026-09-29T17:32:48.508Z","updated":"2026-09-30T20:39:47.581Z","title":"The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-102761","published":"2026-09-29T17:30:45.499Z","updated":"2026-09-30T20:41:01.935Z","title":"NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's upper bound…","severity":"CRITICAL","score":9.3,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-102760","published":"2026-09-29T17:29:11.787Z","updated":"2026-09-29T21:01:57.992Z","title":"When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP…","severity":"HIGH","score":8.3,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-102759","published":"2026-09-29T17:28:04.461Z","updated":"2026-09-29T21:01:58.130Z","title":"NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In `_nx_secure_verify_mac`, a decrypted application…","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2026-102758","published":"2026-09-29T17:26:44.424Z","updated":"2026-09-30T20:42:39.497Z","title":"The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data. It is the primitive underneath all…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2026-102757","published":"2026-09-29T17:24:54.699Z","updated":"2026-10-02T12:12:19.823Z","title":"An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that…","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2026-90882","published":"2026-09-22T09:27:34.713Z","updated":"2026-09-22T13:06:14.742Z","title":"Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"open-vsx.org","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2026-92612","published":"2026-09-21T10:47:02.731Z","updated":"2026-09-21T11:09:34.304Z","title":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts…","severity":"LOW","score":1,"vendor":"Eclipse Foundation","product":"Eclipse iceoryx™","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2025-12999","published":"2026-09-21T08:59:00.465Z","updated":"2026-09-30T15:09:36.585Z","title":"UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and…","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse Open VSX","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-92611","published":"2026-09-17T10:34:44.255Z","updated":"2026-09-17T12:09:56.395Z","title":"In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single…","severity":"MEDIUM","score":4.8,"vendor":"Eclipse Foundation","product":"Eclipse Ankaios","kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2026-86836","published":"2026-09-14T17:44:56.384Z","updated":"2026-09-15T08:18:26.215Z","title":"In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse Ankaios","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-88819","published":"2026-09-14T15:32:36.047Z","updated":"2026-09-14T19:23:00.453Z","title":"In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse Data Plane Core","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2026-78299","published":"2026-09-14T12:59:14.849Z","updated":"2026-09-14T19:23:10.801Z","title":"In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations…","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse Embedded CDT (C/C++ Development Tools)","kev":false,"epss":0.00537,"kevAdded":null},{"id":"CVE-2026-89321","published":"2026-09-14T08:13:03.579Z","updated":"2026-09-14T10:30:31.933Z","title":"Publishing limits the compressed size of a VSIX (ovsx.publishing.max-content-size, 512 MB by default) but nothing limited how large an entry becomes when…","severity":"MEDIUM","score":4.3,"vendor":"Eclipse Foundation","product":"Eclipse OpenVSX","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2026-84197","published":"2026-09-08T20:01:22.660Z","updated":"2026-09-09T20:51:34.483Z","title":"In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor…","severity":"CRITICAL","score":9.2,"vendor":"Eclipse Foundation","product":"Eclipse Ditto","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2026-86464","published":"2026-09-08T19:43:28.874Z","updated":"2026-09-09T20:51:34.629Z","title":"In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deployment included…","severity":"CRITICAL","score":9.9,"vendor":"Eclipse Foundation","product":"Eclipse aeriOS","kev":false,"epss":0.00546,"kevAdded":null},{"id":"CVE-2026-12611","published":"2026-09-08T12:28:51.669Z","updated":"2026-09-09T10:15:48.299Z","title":"A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-19203","published":"2026-09-08T12:08:37.576Z","updated":"2026-09-08T14:21:55.816Z","title":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request…","severity":"HIGH","score":8.3,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2026-86590","published":"2026-09-08T09:15:25.594Z","updated":"2026-09-08T12:22:14.772Z","title":"In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an…","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse Che","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2026-19204","published":"2026-09-07T10:19:24.186Z","updated":"2026-09-08T15:06:46.810Z","title":"A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2026-85201","published":"2026-09-07T10:01:07.356Z","updated":"2026-09-08T15:06:08.932Z","title":"In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received…","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse Ankaios","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2026-84173","published":"2026-09-07T09:42:03.424Z","updated":"2026-09-08T15:03:21.136Z","title":"In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rules whose first path…","severity":"HIGH","score":8.3,"vendor":"Eclipse Foundation","product":"Eclipse Ankaios","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2026-84736","published":"2026-09-03T16:10:32.871Z","updated":"2026-09-03T17:38:14.998Z","title":"In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate…","severity":"HIGH","score":8.3,"vendor":"Eclipse Foundation","product":"Eclipse aeriOS","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-85199","published":"2026-09-03T14:11:31.954Z","updated":"2026-09-03T14:25:59.792Z","title":"Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API. User-controlled identifiers used to create,…","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse aeriOS","kev":false,"epss":0.0091,"kevAdded":null},{"id":"CVE-2026-80515","published":"2026-09-03T13:41:00.347Z","updated":"2026-09-03T13:49:45.714Z","title":"In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whether to apply its…","severity":"HIGH","score":8.9,"vendor":"Eclipse Foundation","product":"Eclipse Arrowhead","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2026-82180","published":"2026-09-03T13:20:01.665Z","updated":"2026-09-03T13:31:50.910Z","title":"In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an…","severity":"CRITICAL","score":9.5,"vendor":"Eclipse Foundation","product":"Eclipse Arrowhead","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2026-82955","published":"2026-09-02T14:43:10.376Z","updated":"2026-09-02T15:58:12.572Z","title":"In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Gateway component had…","severity":"CRITICAL","score":9,"vendor":"Eclipse Foundation","product":"Eclipse aeriOS","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-82958","published":"2026-09-02T10:12:49.085Z","updated":"2026-09-02T12:53:05.342Z","title":"In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting…","severity":"HIGH","score":7.6,"vendor":"Eclipse Foundation","product":"Eclipse Ditto","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-84175","published":"2026-09-02T09:45:58.359Z","updated":"2026-09-02T12:53:55.919Z","title":"In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the…","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"Eclipse Ditto","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2026-82217","published":"2026-08-31T13:40:56.645Z","updated":"2026-09-01T03:56:19.988Z","title":"In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI \"Agent Mode\" file-change tools (writeFileContent, suggestFileContent, and the…","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00617,"kevAdded":null},{"id":"CVE-2026-18918","published":"2026-08-28T08:54:07.990Z","updated":"2026-08-31T12:27:40.249Z","title":"OAuth 1.0 session-fixation chain via unauthenticated provisional-consumer registration and insecure v1_0Allowed default","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse Lyo","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2026-79653","published":"2026-08-27T13:25:03.811Z","updated":"2026-08-27T19:45:16.464Z","title":"In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key…","severity":"MEDIUM","score":6,"vendor":"Eclipse Foundation","product":"Eclipse SW360","kev":false,"epss":0.00474,"kevAdded":null},{"id":"CVE-2026-16440","published":"2026-08-19T10:12:24.389Z","updated":"2026-08-19T15:39:52.363Z","title":"In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.","severity":"MEDIUM","score":5.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2026-19884","published":"2026-08-14T15:32:38.628Z","updated":"2026-08-17T12:28:44.767Z","title":"In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first.…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2026-15803","published":"2026-08-12T15:38:30.997Z","updated":"2026-08-13T15:22:54.290Z","title":"In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted XML-based RDF data or query…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse RDF4J","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2026-12605","published":"2026-08-06T13:18:05.928Z","updated":"2026-08-06T14:43:27.887Z","title":"In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if…","severity":"CRITICAL","score":9.6,"vendor":"Eclipse Foundation","product":"Eclipse GlassFish","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2026-46581","published":"2026-08-05T11:09:41.817Z","updated":"2026-08-05T14:38:08.035Z","title":"In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Mojarra","kev":false,"epss":0.00556,"kevAdded":null},{"id":"CVE-2026-61891","published":"2026-08-05T11:03:01.669Z","updated":"2026-08-05T12:35:46.717Z","title":"In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GET /file`, `GET /files/`, `PUT…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00533,"kevAdded":null},{"id":"CVE-2026-60009","published":"2026-08-05T10:59:24.458Z","updated":"2026-08-05T12:37:08.689Z","title":"In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST /file-upload` in every filesystem-enabled deployment. The…","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2026-12609","published":"2026-08-05T10:55:42.736Z","updated":"2026-08-05T13:03:23.241Z","title":"In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*)` HTTP endpoint,…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.01644,"kevAdded":null},{"id":"CVE-2026-14574","published":"2026-08-05T10:51:47.869Z","updated":"2026-08-05T13:05:29.371Z","title":"In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia/core` recursively merges preference values…","severity":"MEDIUM","score":5.7,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2026-14304","published":"2026-08-05T10:40:03.743Z","updated":"2026-08-05T13:03:57.843Z","title":"In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker…","severity":"MEDIUM","score":4.6,"vendor":"Eclipse Foundation","product":"Eclipse Accessibility Tools Framework (ACTF)","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-63248","published":"2026-08-04T12:07:43.820Z","updated":"2026-08-04T15:02:13.054Z","title":"In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Milo","kev":false,"epss":0.0026,"kevAdded":null},{"id":"CVE-2026-58080","published":"2026-08-04T12:05:10.547Z","updated":"2026-08-04T15:02:18.894Z","title":"In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On servers that rely on role permissions…","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse Milo","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2026-63252","published":"2026-08-04T12:03:18.647Z","updated":"2026-08-04T15:02:26.923Z","title":"In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects,…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Milo","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2026-62927","published":"2026-08-04T11:57:59.822Z","updated":"2026-08-04T15:02:34.431Z","title":"In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization,…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Milo","kev":false,"epss":0.00418,"kevAdded":null},{"id":"CVE-2026-60007","published":"2026-08-04T11:55:41.934Z","updated":"2026-08-04T15:02:43.092Z","title":"In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other…","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse Milo","kev":false,"epss":0.00553,"kevAdded":null},{"id":"CVE-2026-61387","published":"2026-08-04T11:52:38.259Z","updated":"2026-08-04T15:02:51.029Z","title":"In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Milo","kev":false,"epss":0.0062,"kevAdded":null},{"id":"CVE-2026-10050","published":"2026-08-04T11:02:40.503Z","updated":"2026-08-04T12:46:38.770Z","title":"Digest authentication lossy encoding","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Jetty - EE8","kev":false,"epss":0.00632,"kevAdded":null},{"id":"CVE-2026-18353","published":"2026-07-30T07:23:04.083Z","updated":"2026-07-30T13:02:36.576Z","title":"Unauthenticated SSRF in PIA via OIDC issuer allowlist bypass","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse CSI - PIA","kev":false,"epss":0.00298,"kevAdded":null},{"id":"CVE-2026-15704","published":"2026-07-24T07:41:42.653Z","updated":"2026-07-24T12:30:35.564Z","title":"CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx Go Components","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2026-16441","published":"2026-07-21T18:07:02.798Z","updated":"2026-07-22T19:07:14.315Z","title":"Eclipse OpenJ9 : Method resolution default method precedence failure","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"OpenJ9","kev":false,"epss":0.00534,"kevAdded":null},{"id":"CVE-2026-16243","published":"2026-07-21T17:46:25.674Z","updated":"2026-07-22T19:02:01.222Z","title":"Eclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zero","severity":"MEDIUM","score":5.7,"vendor":"Eclipse Foundation","product":"Eclipse OMR","kev":false,"epss":0.0052,"kevAdded":null},{"id":"CVE-2026-16439","published":"2026-07-21T17:28:44.409Z","updated":"2026-07-22T18:27:00.671Z","title":"Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow","severity":"MEDIUM","score":5.8,"vendor":"Eclipse Foundation","product":"OpenJ9","kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2026-16454","published":"2026-07-21T16:38:27.723Z","updated":"2026-07-22T18:58:48.011Z","title":"Privilege Escalation in Eclipse hawkBit DDI allows Tenant-Isolated Firmware Exfiltration","severity":"MEDIUM","score":4.3,"vendor":"Eclipse Foundation","product":"eclipse-hawkbit/hawkbit","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2024-7708","published":"2026-07-14T09:01:53.869Z","updated":"2026-07-14T12:17:11.635Z","title":"For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2026-8384","published":"2026-07-14T08:56:17.525Z","updated":"2026-07-14T12:18:29.831Z","title":"In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected:…","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-6790","published":"2026-07-14T08:51:30.527Z","updated":"2026-07-14T12:20:35.130Z","title":"In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host…","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2026-10051","published":"2026-07-14T08:44:38.233Z","updated":"2026-07-14T12:57:50.096Z","title":"In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection.…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2026-12606","published":"2026-07-14T08:28:17.257Z","updated":"2026-07-27T11:37:48.096Z","title":"Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveraged to perform HTTP…","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse GlassFish","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2026-15075","published":"2026-07-14T08:15:53.650Z","updated":"2026-07-14T12:18:54.815Z","title":"In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-15076","published":"2026-07-14T08:09:12.951Z","updated":"2026-07-14T12:20:29.616Z","title":"In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-9561","published":"2026-07-14T07:59:20.706Z","updated":"2026-07-14T12:22:02.042Z","title":"Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the authoritative source of the client IP address in audit log…","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse Kura","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2026-57898","published":"2026-07-14T07:51:19.002Z","updated":"2026-08-31T12:27:02.684Z","title":"In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments using the MongoDB backend are vulnerable to an unauthenticated…","severity":"CRITICAL","score":9,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx - Java Server SDK","kev":false,"epss":0.00681,"kevAdded":null},{"id":"CVE-2026-13699","published":"2026-07-14T07:38:23.271Z","updated":"2026-07-14T12:32:37.446Z","title":"Databroker 0.6.1 PublishValue missing data_point panic","severity":"MEDIUM","score":4.3,"vendor":"Eclipse Foundation","product":"Eclipse KUKSA - Databroker","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2026-10055","published":"2026-07-03T10:30:57.038Z","updated":"2026-07-06T15:23:38.516Z","title":"In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker-controlled URL from any client connected to the standard…","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2026-10054","published":"2026-07-03T10:11:32.446Z","updated":"2026-07-07T03:56:07.775Z","title":"In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privileged terminal RPC over WebSocket (/services/shell-terminal,…","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2026-14336","published":"2026-07-02T08:29:16.010Z","updated":"2026-07-02T12:26:16.287Z","title":"PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.org ') in is_issuer_known,…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse CSI - PIA","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-9563","published":"2026-07-02T07:33:25.218Z","updated":"2026-07-02T12:27:25.923Z","title":"In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of characters…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Parsson","kev":false,"epss":0.00346,"kevAdded":null},{"id":"CVE-2026-13323","published":"2026-07-01T11:28:20.888Z","updated":"2026-07-01T12:19:20.920Z","title":"In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type: text/html and without a…","severity":"MEDIUM","score":4.1,"vendor":"Eclipse Foundation","product":"Eclipse Open VSX","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-12616","published":"2026-06-29T13:23:38.967Z","updated":"2026-06-29T13:51:57.117Z","title":"The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that string into…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse CSI - PIA","kev":false,"epss":0.00539,"kevAdded":null},{"id":"CVE-2026-9267","published":"2026-06-29T08:10:52.567Z","updated":"2026-06-29T11:47:25.006Z","title":"Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds read vulnerability in the check_server_certificate() function…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse tinydtls","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-4983","published":"2026-06-23T10:50:38.938Z","updated":"2026-06-23T12:03:13.663Z","title":"Open VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and serves them with Content-Type: image/svg+xml without security…","severity":"MEDIUM","score":4.1,"vendor":"Eclipse Foundation","product":"Eclipse Open VSX","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2026-11576","published":"2026-06-19T08:27:59.652Z","updated":"2026-06-22T15:11:32.374Z","title":"The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2026-44691","published":"2026-06-18T14:35:25.486Z","updated":"2026-06-19T03:55:44.974Z","title":"In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2026-22551","published":"2026-06-18T14:32:01.444Z","updated":"2026-06-18T15:25:13.612Z","title":"In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary external URLs…","severity":"MEDIUM","score":6.7,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-46580","published":"2026-06-18T14:26:59.389Z","updated":"2026-06-19T03:55:46.723Z","title":"In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00507,"kevAdded":null},{"id":"CVE-2026-44688","published":"2026-06-18T14:22:33.738Z","updated":"2026-06-19T03:55:47.810Z","title":"In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context without distinguishing…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00507,"kevAdded":null},{"id":"CVE-2026-9158","published":"2026-06-18T14:10:18.112Z","updated":"2026-06-18T14:40:32.904Z","title":"In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This…","severity":"MEDIUM","score":5.2,"vendor":"Eclipse Foundation","product":"Eclipse 4diac","kev":false,"epss":0.00601,"kevAdded":null},{"id":"CVE-2026-2586","published":"2026-05-19T14:12:06.459Z","updated":"2026-06-29T08:34:31.867Z","title":"An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send…","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.00842,"kevAdded":null},{"id":"CVE-2026-2587","published":"2026-05-19T14:03:18.650Z","updated":"2026-06-29T08:41:24.518Z","title":"A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The…","severity":"CRITICAL","score":9.6,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.00646,"kevAdded":null},{"id":"CVE-2026-6860","published":"2026-05-06T09:55:12.531Z","updated":"2026-05-12T20:29:09.712Z","title":"A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2026-7412","published":"2026-05-05T14:15:05.877Z","updated":"2026-05-06T15:25:44.521Z","title":"In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated…","severity":"HIGH","score":8.6,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx","kev":false,"epss":0.00516,"kevAdded":null},{"id":"CVE-2026-7411","published":"2026-05-05T14:07:53.476Z","updated":"2026-05-06T15:25:50.007Z","title":"In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote…","severity":"CRITICAL","score":10,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx","kev":false,"epss":0.03678,"kevAdded":null},{"id":"CVE-2026-6918","published":"2026-05-05T12:29:09.667Z","updated":"2026-07-15T00:40:27.495Z","title":"In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00517,"kevAdded":null},{"id":"CVE-2026-6272","published":"2026-04-24T08:28:17.690Z","updated":"2026-04-24T11:29:18.312Z","title":"A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending…","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse KUKSA - Databroker","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2026-2332","published":"2026-04-14T10:59:10.193Z","updated":"2026-09-14T12:04:28.913Z","title":"HTTP Request Smuggling via Chunked Extension Quoted-String Parsing","severity":"HIGH","score":7.4,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.01305,"kevAdded":null},{"id":"CVE-2026-5795","published":"2026-04-08T13:32:28.935Z","updated":"2026-09-14T12:04:27.326Z","title":"In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks,…","severity":"HIGH","score":7.4,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00538,"kevAdded":null},{"id":"CVE-2026-24457","published":"2026-03-05T16:27:30.984Z","updated":"2026-08-05T08:00:11.450Z","title":"An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A…","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse OpenMQ","kev":false,"epss":0.00699,"kevAdded":null},{"id":"CVE-2026-1605","published":"2026-03-05T09:39:01.315Z","updated":"2026-09-14T12:04:23.826Z","title":"In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding:…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00741,"kevAdded":null},{"id":"CVE-2025-11143","published":"2026-03-05T09:26:59.830Z","updated":"2026-03-05T14:48:41.622Z","title":"The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using…","severity":"LOW","score":3.7,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2026-22886","published":"2026-03-03T09:18:46.109Z","updated":"2026-03-03T14:51:24.570Z","title":"OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication. However, the product ships with a default administrative…","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse OpenMQ","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2026-1699","published":"2026-01-30T09:57:14.877Z","updated":"2026-02-02T19:26:31.652Z","title":"In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and…","severity":"CRITICAL","score":10,"vendor":"Eclipse Foundation","product":"Eclipse Theia - Website","kev":false,"epss":0.00552,"kevAdded":null},{"id":"CVE-2026-1188","published":"2026-01-29T08:36:02.880Z","updated":"2026-01-29T16:42:05.567Z","title":"In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse OMR","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2026-0648","published":"2026-01-27T15:40:31.216Z","updated":"2026-01-27T15:53:36.128Z","title":"The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c)…","severity":"HIGH","score":7.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2025-55095","published":"2026-01-27T15:34:47.755Z","updated":"2026-01-27T15:58:14.494Z","title":"The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition…","severity":"MEDIUM","score":4.2,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - USBX","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2025-55102","published":"2026-01-27T15:25:36.203Z","updated":"2026-01-27T15:58:21.021Z","title":"A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of \"Packet…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2026-1002","published":"2026-01-15T20:50:25.642Z","updated":"2026-01-15T21:09:22.172Z","title":"Eclipse Vert.x Web static handler file access denial","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Vert.x","product":"Eclipse Vert.x","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2025-14549","published":"2025-12-15T05:32:22.095Z","updated":"2025-12-15T16:02:25.978Z","title":"OMR on Z processors Exposing a possible buffer over-read problem","severity":"MEDIUM","score":6.9,"vendor":"Eclipse OMR","product":"Eclipse OMR","kev":false,"epss":0.00298,"kevAdded":null},{"id":"CVE-2025-10543","published":"2025-12-02T08:18:16.724Z","updated":"2025-12-02T13:55:51.665Z","title":"In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their…","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"paho.mqtt.golang (Go MQTT v3.1 library)","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2025-12383","published":"2025-11-18T15:14:37.765Z","updated":"2025-11-18T21:34:35.027Z","title":"Race Condition allows Bypass of Trust Restrictions","severity":"CRITICAL","score":9.4,"vendor":"Eclipse Foundation","product":"Jersey","kev":false,"epss":0.00296,"kevAdded":null},{"id":"CVE-2025-11965","published":"2025-10-22T14:50:07.602Z","updated":"2025-10-22T15:56:08.021Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to…","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Vert.x","kev":false,"epss":0.00503,"kevAdded":null},{"id":"CVE-2025-11966","published":"2025-10-22T14:44:24.145Z","updated":"2025-10-22T15:26:41.527Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when \"directory listing\" is enabled, file and directory names are inserted into generated HTML…","severity":"LOW","score":2.3,"vendor":"Eclipse Foundation","product":"Vert.x","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2025-55086","published":"2025-10-20T17:49:29.647Z","updated":"2025-10-20T20:23:18.104Z","title":"In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the…","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"NextX Duo","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2025-55085","published":"2025-10-17T14:22:28.880Z","updated":"2025-10-20T18:42:08.621Z","title":"Web http client: Unchecked Server-Side Malicious Packet Issue","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2025-55087","published":"2025-10-17T06:03:14.098Z","updated":"2025-10-17T13:07:14.994Z","title":"In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3…","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"NextX Duo","kev":false,"epss":0.00455,"kevAdded":null},{"id":"CVE-2025-55100","published":"2025-10-17T05:40:10.333Z","updated":"2025-10-17T13:11:00.258Z","title":"Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()","severity":"LOW","score":2.4,"vendor":"Eclipse Foundation","product":"USBX","kev":false,"epss":0.00562,"kevAdded":null},{"id":"CVE-2025-55099","published":"2025-10-17T05:38:30.900Z","updated":"2025-10-17T13:13:12.730Z","title":"Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()","severity":"LOW","score":2.4,"vendor":"Eclipse Foundation","product":"USBX","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2025-55098","published":"2025-10-17T05:36:59.542Z","updated":"2025-10-17T14:14:20.773Z","title":"Potential out-of-bounds read in _ux_host_class_audio_device_type_get()","severity":"LOW","score":1,"vendor":"Eclipse Foundation","product":"USBX","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2025-55097","published":"2025-10-17T05:35:02.744Z","updated":"2025-10-17T13:15:56.507Z","title":"Potential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get()","severity":"LOW","score":2.4,"vendor":"Eclipse Foundation","product":"USBX","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2025-55096","published":"2025-10-17T05:32:45.567Z","updated":"2025-10-17T13:20:44.212Z","title":"Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()","severity":"LOW","score":2.1,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2025-55094","published":"2025-10-17T05:29:00.960Z","updated":"2025-10-17T14:15:12.631Z","title":"Potential out-of-bounds read in _nx_icmpv6_validate_options()","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.0041,"kevAdded":null},{"id":"CVE-2025-55093","published":"2025-10-17T05:11:43.761Z","updated":"2025-10-17T14:21:12.250Z","title":"Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2025-55092","published":"2025-10-17T05:09:16.494Z","updated":"2025-10-17T14:23:20.788Z","title":"Potential out of bound read in _nx_ipv4_option_process()","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2025-55091","published":"2025-10-16T07:56:33.908Z","updated":"2025-10-16T13:33:01.266Z","title":"Potential out of bound read in _nx_ip_packet_receive()","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2025-55090","published":"2025-10-16T06:43:17.480Z","updated":"2025-10-16T14:24:53.582Z","title":"Potential out of bound read issue in _nx_ipv4_packet_receive()  in NetX Duo","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2025-55089","published":"2025-10-16T06:33:40.809Z","updated":"2025-10-16T14:25:24.055Z","title":"Eclipse ThreadX FileX RAM disk driver buffer overflow","severity":"CRITICAL","score":9.2,"vendor":"Eclipse Foundation","product":"FileX","kev":false,"epss":0.00512,"kevAdded":null},{"id":"CVE-2025-55084","published":"2025-10-16T06:29:35.631Z","updated":"2025-10-16T14:29:44.816Z","title":"Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2025-55083","published":"2025-10-15T14:11:23.044Z","updated":"2025-10-27T16:12:55.970Z","title":"Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension()","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2025-55082","published":"2025-10-15T11:03:31.806Z","updated":"2025-10-15T13:11:31.010Z","title":"Potential out of bound read and info leak in_nx_secure_tls_psk_identity_find()","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2025-55081","published":"2025-10-15T10:46:05.076Z","updated":"2025-10-15T13:14:49.223Z","title":"Potential out of bound read in _nx_secure_tls_process_clienthello()","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2025-55080","published":"2025-10-15T05:41:50.536Z","updated":"2025-10-15T17:41:32.823Z","title":"Improper Parameter Check in ThreadX Syscall Implementation","severity":"HIGH","score":7.2,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2025-55079","published":"2025-10-15T04:29:00.882Z","updated":"2025-10-15T18:38:38.157Z","title":"Missing check for thread priority","severity":"MEDIUM","score":5.7,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2025-55078","published":"2025-10-14T07:28:56.148Z","updated":"2025-10-14T15:29:21.710Z","title":"Incomplete validation of kernel object pointers in system calls","severity":"MEDIUM","score":5.7,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2025-5115","published":"2025-08-20T19:07:11.546Z","updated":"2025-11-04T21:11:37.182Z","title":"MadeYouReset HTTP/2 vulnerability","severity":"HIGH","score":7.7,"vendor":"Eclipse Jetty","product":"Eclipse Jetty","kev":false,"epss":0.03566,"kevAdded":null},{"id":"CVE-2025-7962","published":"2025-07-21T17:22:12.520Z","updated":"2026-06-23T10:26:14.007Z","title":"In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \\r and \\n UTF-8 characters to separate different messages.","severity":"MEDIUM","score":6,"vendor":"Eclipse Foundation","product":"Jakarta Mail","kev":false,"epss":0.00891,"kevAdded":null},{"id":"CVE-2024-9408","published":"2025-07-16T11:15:03.412Z","updated":"2025-07-16T15:53:13.391Z","title":"In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.","severity":"HIGH","score":8.9,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-10032","published":"2025-07-16T11:07:55.848Z","updated":"2025-07-16T14:38:55.074Z","title":"In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.","severity":"MEDIUM","score":6.1,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2024-10031","published":"2025-07-16T11:02:51.419Z","updated":"2025-07-16T14:38:59.823Z","title":"In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying operating…","severity":"MEDIUM","score":5.8,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2024-10029","published":"2025-07-16T10:55:35.408Z","updated":"2025-07-16T14:39:05.571Z","title":"In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console.","severity":"MEDIUM","score":4.5,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2024-9343","published":"2025-07-16T10:47:55.853Z","updated":"2025-07-16T14:39:10.179Z","title":"In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.","severity":"MEDIUM","score":6.1,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2024-9342","published":"2025-07-16T10:14:28.966Z","updated":"2026-06-18T13:59:24.218Z","title":"In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login…","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.00477,"kevAdded":null},{"id":"CVE-2025-6705","published":"2025-06-27T14:57:06.595Z","updated":"2025-07-02T06:58:28.586Z","title":"A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions. Specifically, the…","severity":"HIGH","score":7.6,"vendor":"Eclipse Foundation","product":"Eclipse Open VSX Registry","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2025-4949","published":"2025-05-21T06:47:19.777Z","updated":"2025-10-14T06:30:04.660Z","title":"XXE vulnerability in Eclipse JGit","severity":"MEDIUM","score":6.8,"vendor":"Eclipse JGit","product":"Eclipse JGit","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2025-4447","published":"2025-05-09T20:40:25.953Z","updated":"2025-05-10T01:46:54.369Z","title":"Buffer Overflow in Eclipse OpenJ9","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"OpenJ9","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2025-1948","published":"2025-05-08T17:48:40.831Z","updated":"2025-05-08T18:31:44.196Z","title":"Eclipse Jetty HTTP clients can increase memory allocation","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Jetty","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2024-13009","published":"2025-05-08T17:29:31.380Z","updated":"2025-05-08T18:56:39.446Z","title":"Eclipse Jetty GZIP buffer release","severity":"HIGH","score":7.2,"vendor":"Eclipse Foundation","product":"Jetty","kev":false,"epss":0.00548,"kevAdded":null},{"id":"CVE-2025-2259","published":"2025-04-06T19:01:20.233Z","updated":"2025-04-14T15:03:15.118Z","title":"Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.0098,"kevAdded":null},{"id":"CVE-2025-2260","published":"2025-04-06T18:56:34.730Z","updated":"2025-04-14T15:03:16.223Z","title":"Eclipse ThreadX NetX Duo HTTP component server denial of service","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.0098,"kevAdded":null},{"id":"CVE-2025-2258","published":"2025-04-06T18:50:42.764Z","updated":"2025-04-15T16:03:10.402Z","title":"Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.0098,"kevAdded":null},{"id":"CVE-2024-10838","published":"2025-03-12T13:03:47.747Z","updated":"2025-03-12T13:34:12.621Z","title":"Integer Underflow in DDS_Security_Deserialize_ methods may lead to OOB read","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse Cyclone DDS","kev":false,"epss":0.00949,"kevAdded":null},{"id":"CVE-2025-1471","published":"2025-02-21T10:07:22.507Z","updated":"2025-02-25T19:15:22.042Z","title":"Eclipse OMR: Buffer overflow vulnerability","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse OMR","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2025-1470","published":"2025-02-21T10:03:24.829Z","updated":"2025-02-21T13:57:26.011Z","title":"Eclipse OMR: Null pointer dereference vulnerability","severity":"MEDIUM","score":5.1,"vendor":"Eclipse Foundation","product":"Eclipse OMR","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2025-0727","published":"2025-02-21T08:19:11.412Z","updated":"2025-02-21T15:34:39.515Z","title":"Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00755,"kevAdded":null},{"id":"CVE-2025-0728","published":"2025-02-21T08:16:16.029Z","updated":"2025-02-21T14:12:36.893Z","title":"Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00761,"kevAdded":null},{"id":"CVE-2025-0726","published":"2025-02-21T08:12:11.703Z","updated":"2025-02-21T14:17:39.802Z","title":"Eclipse ThreadX NetX Duo HTTP server denial of service","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00755,"kevAdded":null},{"id":"CVE-2025-1007","published":"2025-02-19T08:40:58.325Z","updated":"2025-02-19T19:36:50.732Z","title":"Improper Authorization in /user/namespace/{namespace}/details","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"OpenVSX","kev":false,"epss":0.00517,"kevAdded":null},{"id":"CVE-2024-10917","published":"2024-11-11T16:55:11.393Z","updated":"2024-11-12T20:14:21.838Z","title":"Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength","severity":"LOW","score":3.7,"vendor":"Eclipse Foundation","product":"Open J9","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2024-3935","published":"2024-10-30T11:45:23.506Z","updated":"2025-11-03T20:38:15.605Z","title":"Eclipse Mosquito: Double free vulnerability","severity":"MEDIUM","score":6,"vendor":"Eclipse Foundation","product":"mosquitto","kev":false,"epss":0.00749,"kevAdded":null},{"id":"CVE-2024-10525","published":"2024-10-30T11:41:08.946Z","updated":"2025-11-03T20:36:24.107Z","title":"Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback","severity":"HIGH","score":7.2,"vendor":"Eclipse Foundation","product":"mosquitto","kev":false,"epss":0.59222,"kevAdded":null},{"id":"CVE-2024-8184","published":"2024-10-14T15:09:37.861Z","updated":"2025-11-03T19:34:56.811Z","title":"Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks","severity":"MEDIUM","score":5.9,"vendor":"Eclipse Foundation","product":"Jetty","kev":false,"epss":0.0103,"kevAdded":null},{"id":"CVE-2024-6762","published":"2024-10-14T15:07:10.942Z","updated":"2025-11-03T19:34:37.967Z","title":"Jetty  PushSessionCacheFilter can cause remote DoS attacks","severity":"LOW","score":3.1,"vendor":"Eclipse Foundation","product":"Jetty","kev":false,"epss":0.00942,"kevAdded":null},{"id":"CVE-2024-6763","published":"2024-10-14T15:06:07.298Z","updated":"2025-03-07T00:10:46.301Z","title":"Jetty URI parsing of invalid authority","severity":"LOW","score":3.7,"vendor":"Eclipse Foundation","product":"Jetty","kev":false,"epss":0.00965,"kevAdded":null},{"id":"CVE-2024-9823","published":"2024-10-14T15:03:02.293Z","updated":"2025-11-03T19:35:02.369Z","title":"Jetty DOS vulnerability on DosFilter","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"Jetty","kev":false,"epss":0.0094,"kevAdded":null},{"id":"CVE-2024-8376","published":"2024-10-11T15:18:54.142Z","updated":"2024-10-31T09:15:30.149Z","title":"Memory leak","severity":"HIGH","score":7.2,"vendor":"Eclipse Foundation","product":"Mosquitto","kev":false,"epss":0.00749,"kevAdded":null},{"id":"CVE-2024-9329","published":"2024-09-30T07:11:53.688Z","updated":"2024-10-07T15:59:12.662Z","title":"Glassfish redirect to untrusted site","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Glassfish","kev":false,"epss":0.00719,"kevAdded":null},{"id":"CVE-2024-9202","published":"2024-09-27T09:35:58.506Z","updated":"2024-09-27T16:09:20.761Z","title":"EDC DataSetResolver policy filtering missing","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"Eclipse Dataspace Components","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2024-8642","published":"2024-09-11T13:34:28.463Z","updated":"2024-09-11T14:06:55.373Z","title":"Eclipse EDC: Consumer pull transfer token validation checks not applied","severity":"MEDIUM","score":5,"vendor":"Eclipse Foundation","product":"Eclipse EDC Connector","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2024-8646","published":"2024-09-11T13:26:47.468Z","updated":"2024-09-11T13:40:06.290Z","title":"Eclipse Glassfish: URL redirection vulnerability to untrusted sites","severity":"MEDIUM","score":6.1,"vendor":"Eclipse Foundation","product":"Eclipse Glassfish","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2024-8391","published":"2024-09-04T15:27:58.478Z","updated":"2024-09-04T17:40:20.318Z","title":"Eclipse Vert.x gRPC server does not limit the maximum message size","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.0058,"kevAdded":null},{"id":"CVE-2023-7272","published":"2024-07-17T15:00:20.172Z","updated":"2024-08-02T08:57:35.165Z","title":"Eclipse Parsson stack overflow with deeply nested objects","severity":"HIGH","score":8.6,"vendor":"Eclipse Foundation","product":"Parsson","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2024-3933","published":"2024-05-27T06:08:15.898Z","updated":"2024-08-01T20:26:57.273Z","title":"Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a buffer","severity":"MEDIUM","score":5.3,"vendor":"Eclipse Foundation","product":"Open J9","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2024-5165","published":"2024-05-23T09:56:31.696Z","updated":"2024-08-01T21:03:11.075Z","title":"Eclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of Input","severity":"MEDIUM","score":6.5,"vendor":"Eclipse Foundation","product":"Eclipse Ditto","kev":false,"epss":0.005,"kevAdded":null},{"id":"CVE-2024-4536","published":"2024-05-07T13:11:45.310Z","updated":"2024-08-01T20:40:47.492Z","title":"Eclipse EDC: OAuth2 Credential Exfiltration Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"EDC","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2024-0740","published":"2024-04-26T09:36:12.658Z","updated":"2024-08-01T18:18:17.860Z","title":"Eclipse Target Management <= 4.5.500 Command Injection","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse Target Management","kev":false,"epss":0.01242,"kevAdded":null},{"id":"CVE-2024-3046","published":"2024-04-09T10:02:39.146Z","updated":"2024-08-22T19:59:23.361Z","title":"In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Kura","kev":false,"epss":0.00576,"kevAdded":null},{"id":"CVE-2024-2212","published":"2024-03-26T15:58:27.486Z","updated":"2025-02-13T17:33:30.356Z","title":"Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()","severity":"HIGH","score":7.3,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2024-2214","published":"2024-03-26T15:48:36.304Z","updated":"2025-02-13T17:33:31.114Z","title":"Missing array size check in _Mtxinit() in the Xtensa port","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-2452","published":"2024-03-26T15:43:36.233Z","updated":"2025-02-13T17:40:10.101Z","title":"Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"ThreadX","kev":false,"epss":0.00909,"kevAdded":null},{"id":"CVE-2023-6194","published":"2023-12-11T14:04:51.680Z","updated":"2024-08-02T08:21:17.798Z","title":"In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) references to…","severity":"LOW","score":2.8,"vendor":"Eclipse Foundation","product":"Eclipse Memory Analyzer (tools.mat)","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2023-5676","published":"2023-11-15T14:02:01.422Z","updated":"2025-11-03T21:50:38.622Z","title":"Eclipse OpenJ9 possible infinite busy hang","severity":"MEDIUM","score":4.1,"vendor":"Eclipse Foundation","product":"OpenJ9","kev":false,"epss":0.0041,"kevAdded":null},{"id":"CVE-2023-4218","published":"2023-11-09T08:26:51.567Z","updated":"2024-09-03T19:26:14.225Z","title":"XXE in eclipse.platform / Eclipse IDE","severity":"MEDIUM","score":5,"vendor":"Eclipse Foundation","product":"Eclipse IDE","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2023-4043","published":"2023-11-03T08:11:39.563Z","updated":"2024-09-05T14:31:17.127Z","title":"Parsson DoS when parsing numbers from untrusted sources","severity":"MEDIUM","score":5.9,"vendor":"Eclipse Foundation","product":"Parsson","kev":false,"epss":0.0089,"kevAdded":null},{"id":"CVE-2023-5763","published":"2023-11-03T06:40:43.441Z","updated":"2024-09-05T19:04:31.768Z","title":"Glassfish remote code execution","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Glassfish","kev":false,"epss":0.00814,"kevAdded":null},{"id":"CVE-2023-5632","published":"2023-10-18T08:34:34.788Z","updated":"2024-09-13T14:50:24.704Z","title":"Unconditionally adding an event to the epoll causes excessive CPU consumption","severity":"HIGH","score":7.5,"vendor":"Eclipse","product":"Mosquitto","kev":false,"epss":0.00803,"kevAdded":null},{"id":"CVE-2023-3592","published":"2023-10-02T19:01:54.842Z","updated":"2025-02-13T16:55:55.699Z","title":"In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.","severity":"MEDIUM","score":5.8,"vendor":"Eclipse","product":"Mosquitto","kev":false,"epss":0.00787,"kevAdded":null},{"id":"CVE-2023-0809","published":"2023-10-02T18:56:26.824Z","updated":"2025-02-13T16:39:08.267Z","title":"In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.","severity":"MEDIUM","score":5.8,"vendor":"Eclipse","product":"Mosquitto","kev":false,"epss":0.00709,"kevAdded":null},{"id":"CVE-2023-4760","published":"2023-09-21T07:35:35.790Z","updated":"2024-09-24T16:26:06.907Z","title":"Remote Code Execution in Eclipse RAP on Windows","severity":"HIGH","score":7.6,"vendor":"Eclipse Foundation","product":"Eclipse RAP","kev":false,"epss":0.0125,"kevAdded":null},{"id":"CVE-2023-4759","published":"2023-09-12T09:12:10.254Z","updated":"2024-08-02T07:37:59.574Z","title":"Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse JGit","kev":false,"epss":0.02194,"kevAdded":null},{"id":"CVE-2023-2597","published":"2023-05-22T00:00:00.000Z","updated":"2024-08-02T06:26:09.798Z","title":"In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not…","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2023-0100","published":"2023-03-15T00:00:00.000Z","updated":"2025-02-27T14:47:48.964Z","title":"In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the…","severity":"HIGH","score":8.8,"vendor":"The Eclipse Foundation","product":"Eclipse BIRT (Business Intelligence Reporting Tool)","kev":false,"epss":0.00847,"kevAdded":null},{"id":"CVE-2022-2712","published":"2023-01-27T00:00:00.000Z","updated":"2026-07-22T14:22:42.969Z","title":"In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'.…","severity":"MEDIUM","score":6.5,"vendor":"The Eclipse Foundation","product":"Eclipse GlassFish","kev":false,"epss":0.00935,"kevAdded":null},{"id":"CVE-2022-3676","published":"2022-10-24T00:00:00.000Z","updated":"2025-05-07T15:59:25.715Z","title":"In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to…","severity":"MEDIUM","score":6.5,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00815,"kevAdded":null},{"id":"CVE-2022-2838","published":"2022-08-16T10:10:08.000Z","updated":"2024-08-03T00:52:59.807Z","title":"In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Sphinx","kev":false,"epss":0.00563,"kevAdded":null},{"id":"CVE-2022-2576","published":"2022-07-29T13:20:10.000Z","updated":"2024-08-03T00:39:08.153Z","title":"In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Californium","kev":false,"epss":0.00606,"kevAdded":null},{"id":"CVE-2021-41037","published":"2022-07-08T03:50:37.000Z","updated":"2024-08-04T02:59:30.336Z","title":"In Eclipse p2, installable units are able to alter the Eclipse Platform installation and the local machine via touchpoints during installation. Those…","severity":"CRITICAL","score":10,"vendor":"The Eclipse Foundation","product":"Eclipse Equinox p2","kev":false,"epss":0.00868,"kevAdded":null},{"id":"CVE-2021-41042","published":"2022-07-07T20:55:10.000Z","updated":"2024-08-04T02:59:31.150Z","title":"In Eclipse Lyo versions 1.0.0 to 4.1.0, a TransformerFactory is initialized with the defaults that do not restrict DTD loading when working with RDF/XML. This…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Lyo","kev":false,"epss":0.01002,"kevAdded":null},{"id":"CVE-2022-2191","published":"2022-07-07T20:45:16.000Z","updated":"2024-08-03T00:32:08.749Z","title":"In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.02178,"kevAdded":null},{"id":"CVE-2022-2047","published":"2022-07-07T20:45:12.000Z","updated":"2024-08-03T00:24:44.138Z","title":"In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme…","severity":"LOW","score":2.7,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.01324,"kevAdded":null},{"id":"CVE-2022-2048","published":"2022-07-07T20:35:09.000Z","updated":"2024-08-03T00:24:43.964Z","title":"In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.02562,"kevAdded":null},{"id":"CVE-2021-41041","published":"2022-04-27T02:10:10.000Z","updated":"2024-08-04T02:59:31.309Z","title":"In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.01085,"kevAdded":null},{"id":"CVE-2021-41040","published":"2022-02-01T11:12:55.000Z","updated":"2024-08-04T02:59:31.269Z","title":"In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-received data.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.01358,"kevAdded":null},{"id":"CVE-2021-41039","published":"2021-12-01T00:00:00.000Z","updated":"2024-08-04T02:59:31.087Z","title":"In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage,…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.01355,"kevAdded":null},{"id":"CVE-2021-41038","published":"2021-11-10T17:05:11.000Z","updated":"2024-08-04T02:59:30.930Z","title":"In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage().","severity":"MEDIUM","score":6.1,"vendor":"The Eclipse Foundation","product":"@theia/plugin-ext","kev":false,"epss":0.00737,"kevAdded":null},{"id":"CVE-2021-41036","published":"2021-11-02T23:15:09.000Z","updated":"2024-08-04T02:59:31.302Z","title":"In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len size in readpacket.","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse Paho MQTT C Client","kev":false,"epss":0.01214,"kevAdded":null},{"id":"CVE-2021-41035","published":"2021-10-25T15:05:11.000Z","updated":"2024-08-04T02:59:30.989Z","title":"In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse OMR","kev":false,"epss":0.01824,"kevAdded":null},{"id":"CVE-2021-41034","published":"2021-09-29T21:35:09.000Z","updated":"2024-08-04T02:59:31.177Z","title":"The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such…","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse Che","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2021-41033","published":"2021-09-13T20:55:09.000Z","updated":"2024-08-04T02:59:30.351Z","title":"In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerable to man-in-the-middle attack if using…","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse Equinox","kev":false,"epss":0.01125,"kevAdded":null},{"id":"CVE-2021-34436","published":"2021-09-02T20:55:10.000Z","updated":"2024-08-04T00:12:50.189Z","title":"In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extension. This…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.02223,"kevAdded":null},{"id":"CVE-2021-34435","published":"2021-09-01T17:20:09.000Z","updated":"2024-08-04T00:12:50.149Z","title":"In Eclipse Theia 0.3.9 to 1.8.1, the \"mini-browser\" extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it…","severity":"HIGH","score":8.8,"vendor":"The Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00595,"kevAdded":null},{"id":"CVE-2021-34434","published":"2021-08-30T00:00:00.000Z","updated":"2024-08-04T00:12:50.159Z","title":"In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.0133,"kevAdded":null},{"id":"CVE-2021-34433","published":"2021-08-20T17:10:10.000Z","updated":"2024-08-04T00:12:50.235Z","title":"In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handshakes accidentally succeeds without…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Californium","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2021-34432","published":"2021-07-27T15:25:17.000Z","updated":"2026-07-02T09:31:38.182Z","title":"In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.01247,"kevAdded":null},{"id":"CVE-2021-34431","published":"2021-07-22T13:45:13.000Z","updated":"2024-08-04T00:12:50.247Z","title":"In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory…","severity":"MEDIUM","score":6.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.01113,"kevAdded":null},{"id":"CVE-2021-34429","published":"2021-07-15T17:00:10.000Z","updated":"2024-08-04T00:12:50.169Z","title":"For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.9933,"kevAdded":null},{"id":"CVE-2021-34430","published":"2021-07-08T03:00:10.000Z","updated":"2024-08-04T00:12:50.067Z","title":"Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse TinyDTLS","kev":false,"epss":0.01045,"kevAdded":null},{"id":"CVE-2021-34427","published":"2021-06-25T00:00:00.000Z","updated":"2024-08-04T00:12:50.360Z","title":"In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir)…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse BIRT","kev":false,"epss":0.57982,"kevAdded":null},{"id":"CVE-2021-34428","published":"2021-06-22T14:45:11.000Z","updated":"2024-08-04T00:12:50.169Z","title":"For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID…","severity":"LOW","score":2.9,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00963,"kevAdded":null},{"id":"CVE-2021-28169","published":"2021-06-09T01:55:09.000Z","updated":"2024-08-03T21:40:12.267Z","title":"For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.7848,"kevAdded":null},{"id":"CVE-2021-28170","published":"2021-05-26T21:55:09.000Z","updated":"2024-08-03T21:40:12.240Z","title":"In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Jakarta Expression Language Implementation","kev":false,"epss":0.02132,"kevAdded":null},{"id":"CVE-2021-28168","published":"2021-04-22T17:35:14.000Z","updated":"2024-08-03T21:40:12.260Z","title":"Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the…","severity":"MEDIUM","score":6.2,"vendor":"The Eclipse Foundation","product":"Eclipse Jersey","kev":false,"epss":0.00869,"kevAdded":null},{"id":"CVE-2021-28167","published":"2021-04-21T17:30:16.000Z","updated":"2024-08-03T21:40:12.207Z","title":"In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool…","severity":"MEDIUM","score":6.5,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.01126,"kevAdded":null},{"id":"CVE-2021-28166","published":"2021-04-07T18:50:19.000Z","updated":"2024-08-03T21:40:12.058Z","title":"In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL…","severity":"MEDIUM","score":6.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.00968,"kevAdded":null},{"id":"CVE-2021-28165","published":"2021-04-01T14:20:14.000Z","updated":"2025-08-27T20:37:23.768Z","title":"In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.53861,"kevAdded":null},{"id":"CVE-2021-28164","published":"2021-04-01T14:20:14.000Z","updated":"2024-08-03T21:40:12.093Z","title":"In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.82371,"kevAdded":null},{"id":"CVE-2021-28163","published":"2021-04-01T14:20:13.000Z","updated":"2024-08-03T21:40:12.280Z","title":"In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of…","severity":"LOW","score":2.7,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.0418,"kevAdded":null},{"id":"CVE-2021-28162","published":"2021-03-12T21:40:15.000Z","updated":"2024-08-03T21:40:12.087Z","title":"In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.","severity":"MEDIUM","score":6.1,"vendor":"The Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00776,"kevAdded":null},{"id":"CVE-2021-28161","published":"2021-03-12T21:40:14.000Z","updated":"2024-08-03T21:40:12.191Z","title":"In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.","severity":"MEDIUM","score":6.1,"vendor":"The Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00708,"kevAdded":null},{"id":"CVE-2020-27225","published":"2021-03-09T18:15:16.000Z","updated":"2024-08-04T16:11:36.031Z","title":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an…","severity":"HIGH","score":7.8,"vendor":"The Eclipse Foundation","product":"Eclipse Platform","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2020-27223","published":"2021-02-26T21:55:13.000Z","updated":"2025-08-20T10:03:37.386Z","title":"In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a…","severity":"MEDIUM","score":5.2,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.78031,"kevAdded":null},{"id":"CVE-2020-27224","published":"2021-02-24T16:40:24.000Z","updated":"2024-08-04T16:11:36.023Z","title":"In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview (@theia/preview), can be exploited to execute arbitrary code.","severity":"CRITICAL","score":9.6,"vendor":"The Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.02593,"kevAdded":null},{"id":"CVE-2020-27222","published":"2021-02-03T15:45:13.000Z","updated":"2024-08-04T16:11:36.000Z","title":"In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Californium","kev":false,"epss":0.00861,"kevAdded":null},{"id":"CVE-2020-27221","published":"2021-01-21T04:55:11.000Z","updated":"2024-08-04T16:11:35.952Z","title":"In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.01551,"kevAdded":null},{"id":"CVE-2020-27220","published":"2021-01-14T22:35:15.000Z","updated":"2024-08-04T16:11:36.045Z","title":"The Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway device is authorized to receive command & control messages when…","severity":"HIGH","score":8.8,"vendor":"The Eclipse Foundation","product":"Eclipse Hono","kev":false,"epss":0.01161,"kevAdded":null},{"id":"CVE-2020-27219","published":"2021-01-14T22:20:13.000Z","updated":"2024-08-04T16:11:36.119Z","title":"In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within…","severity":"MEDIUM","score":6.1,"vendor":"The Eclipse Foundation","product":"Eclipse Hawkbit","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2020-27218","published":"2020-11-28T00:00:00.000Z","updated":"2024-08-04T16:11:36.083Z","title":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is…","severity":"MEDIUM","score":4.8,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.08277,"kevAdded":null},{"id":"CVE-2020-27217","published":"2020-11-13T19:30:16.000Z","updated":"2024-08-04T16:11:35.953Z","title":"In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Hono","kev":false,"epss":0.01304,"kevAdded":null},{"id":"CVE-2020-27216","published":"2020-10-23T00:05:14.000Z","updated":"2024-08-04T16:11:36.150Z","title":"In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's…","severity":"HIGH","score":7,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.04352,"kevAdded":null},{"id":"CVE-2019-17640","published":"2020-10-15T20:30:15.000Z","updated":"2024-08-05T01:47:13.749Z","title":"In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.02002,"kevAdded":null},{"id":"CVE-2019-17639","published":"2020-07-15T21:19:31.000Z","updated":"2024-08-05T01:47:13.522Z","title":"In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.01504,"kevAdded":null},{"id":"CVE-2019-17637","published":"2020-07-15T14:55:13.000Z","updated":"2024-08-05T01:47:13.211Z","title":"In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the…","severity":"HIGH","score":7.1,"vendor":"The Eclipse Foundation","product":"Eclipse Web Tools Platform","kev":false,"epss":0.00879,"kevAdded":null},{"id":"CVE-2019-17638","published":"2020-07-09T18:10:12.000Z","updated":"2024-08-05T01:47:13.630Z","title":"In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error.…","severity":"CRITICAL","score":9.4,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.11138,"kevAdded":null},{"id":"CVE-2019-17636","published":"2020-03-10T14:30:14.000Z","updated":"2024-08-05T01:47:13.536Z","title":"In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is \"Mini-Browser\", published as \"@theia/mini-browser\" on…","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse Theia","kev":false,"epss":0.00601,"kevAdded":null},{"id":"CVE-2019-17635","published":"2020-01-17T18:35:13.000Z","updated":"2024-08-05T01:47:13.610Z","title":"Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a…","severity":"HIGH","score":7.8,"vendor":"The Eclipse Foundation","product":"Eclipse Memory Analyzer","kev":false,"epss":0.01339,"kevAdded":null},{"id":"CVE-2019-17634","published":"2020-01-17T18:35:13.000Z","updated":"2024-08-05T01:47:13.640Z","title":"Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap…","severity":"CRITICAL","score":9,"vendor":"The Eclipse Foundation","product":"Eclipse Memory Analyzer","kev":false,"epss":0.01933,"kevAdded":null},{"id":"CVE-2019-17633","published":"2019-12-19T17:05:12.000Z","updated":"2024-08-05T01:47:13.494Z","title":"For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che…","severity":"HIGH","score":8.8,"vendor":"The Eclipse Foundation","product":"Eclipse Che","kev":false,"epss":0.00811,"kevAdded":null},{"id":"CVE-2019-17632","published":"2019-11-25T21:56:15.000Z","updated":"2024-08-05T01:47:13.488Z","title":"In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html…","severity":"MEDIUM","score":6.1,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.01905,"kevAdded":null},{"id":"CVE-2019-17631","published":"2019-10-17T17:38:26.000Z","updated":"2024-08-05T01:47:13.242Z","title":"From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.","severity":"CRITICAL","score":9.1,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.02066,"kevAdded":null},{"id":"CVE-2019-11779","published":"2019-09-19T13:30:43.000Z","updated":"2024-08-04T23:03:32.805Z","title":"In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or…","severity":"MEDIUM","score":6.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.02742,"kevAdded":null},{"id":"CVE-2019-11778","published":"2019-09-18T22:25:53.000Z","updated":"2024-08-04T23:03:32.828Z","title":"If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a…","severity":"MEDIUM","score":5.4,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.00761,"kevAdded":null},{"id":"CVE-2019-11774","published":"2019-09-12T17:25:54.000Z","updated":"2024-08-04T23:03:32.812Z","title":"Prior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for…","severity":"HIGH","score":7.4,"vendor":"The Eclipse Foundation","product":"Eclipse OMR","kev":false,"epss":0.00672,"kevAdded":null},{"id":"CVE-2019-11773","published":"2019-09-12T17:25:54.000Z","updated":"2024-08-04T23:03:32.873Z","title":"Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users.","severity":"HIGH","score":7.8,"vendor":"The Eclipse Foundation","product":"Eclipse OMR","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2019-11777","published":"2019-09-11T17:55:21.000Z","updated":"2024-08-04T23:03:32.792Z","title":"In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Paho","kev":false,"epss":0.00834,"kevAdded":null},{"id":"CVE-2019-11776","published":"2019-08-09T18:41:16.000Z","updated":"2024-08-04T23:03:32.740Z","title":"In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.","severity":"MEDIUM","score":6.1,"vendor":"The Eclipse Foundation","product":"Eclipse BIRT","kev":false,"epss":0.00897,"kevAdded":null},{"id":"CVE-2019-11775","published":"2019-07-30T13:45:38.000Z","updated":"2024-08-04T23:03:32.862Z","title":"All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning -…","severity":"HIGH","score":7.4,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.01468,"kevAdded":null},{"id":"CVE-2019-11772","published":"2019-07-17T20:17:27.000Z","updated":"2024-08-04T23:03:32.870Z","title":"In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.02098,"kevAdded":null},{"id":"CVE-2019-11771","published":"2019-07-17T20:17:07.000Z","updated":"2024-08-04T23:03:32.790Z","title":"AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.","severity":"HIGH","score":7.8,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2019-11770","published":"2019-06-14T13:53:59.000Z","updated":"2024-08-04T23:03:32.866Z","title":"In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of HTTPS. Any of these…","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse Buildship","kev":false,"epss":0.01265,"kevAdded":null},{"id":"CVE-2019-10249","published":"2019-05-06T16:12:09.000Z","updated":"2024-08-04T22:17:19.691Z","title":"All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse Xtext","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2019-10248","published":"2019-04-22T20:15:24.000Z","updated":"2024-08-04T22:17:20.094Z","title":"Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could…","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse Vorto","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2019-10247","published":"2019-04-22T20:14:49.000Z","updated":"2024-08-04T22:17:19.834Z","title":"In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.05941,"kevAdded":null},{"id":"CVE-2019-10246","published":"2019-04-22T20:14:49.000Z","updated":"2024-08-04T22:17:19.655Z","title":"In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.04094,"kevAdded":null},{"id":"CVE-2019-10241","published":"2019-04-22T20:14:49.000Z","updated":"2024-08-04T22:17:19.587Z","title":"In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a…","severity":"MEDIUM","score":6.1,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.09365,"kevAdded":null},{"id":"CVE-2019-10245","published":"2019-04-19T13:43:31.000Z","updated":"2024-08-04T22:17:19.773Z","title":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.02492,"kevAdded":null},{"id":"CVE-2019-10244","published":"2019-04-09T15:42:42.000Z","updated":"2024-08-04T22:17:19.931Z","title":"In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and the emulator position service (not part…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Kura","kev":false,"epss":0.01825,"kevAdded":null},{"id":"CVE-2019-10243","published":"2019-04-09T15:42:42.000Z","updated":"2024-08-04T22:17:19.791Z","title":"In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Kura","kev":false,"epss":0.01337,"kevAdded":null},{"id":"CVE-2019-10242","published":"2019-04-09T15:42:42.000Z","updated":"2024-08-04T22:17:20.146Z","title":"In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Kura","kev":false,"epss":0.01963,"kevAdded":null},{"id":"CVE-2019-10240","published":"2019-04-03T18:04:29.000Z","updated":"2024-08-04T22:17:19.603Z","title":"Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts…","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse hawkBit","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2018-12545","published":"2019-03-27T19:21:37.000Z","updated":"2024-08-05T08:38:06.170Z","title":"In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.05124,"kevAdded":null},{"id":"CVE-2017-7655","published":"2019-03-27T19:20:36.000Z","updated":"2024-08-05T16:12:27.944Z","title":"In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.01762,"kevAdded":null},{"id":"CVE-2018-12551","published":"2019-03-27T17:26:20.000Z","updated":"2024-08-05T08:38:06.296Z","title":"When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any malformed data in the password file will…","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.01475,"kevAdded":null},{"id":"CVE-2018-12550","published":"2019-03-27T17:26:20.000Z","updated":"2024-08-05T08:38:06.290Z","title":"When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines,…","severity":"HIGH","score":8.1,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.01353,"kevAdded":null},{"id":"CVE-2018-12546","published":"2019-03-27T17:26:20.000Z","updated":"2024-08-05T08:38:06.266Z","title":"In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the…","severity":"MEDIUM","score":6.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2018-12549","published":"2019-02-11T15:00:00.000Z","updated":"2024-08-05T08:38:06.337Z","title":"In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.02332,"kevAdded":null},{"id":"CVE-2018-12547","published":"2019-02-11T15:00:00.000Z","updated":"2024-08-05T08:38:05.983Z","title":"In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.02744,"kevAdded":null},{"id":"CVE-2018-12548","published":"2019-01-31T20:00:00.000Z","updated":"2024-08-05T08:38:06.287Z","title":"In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.01134,"kevAdded":null},{"id":"CVE-2018-12543","published":"2018-11-15T15:00:00.000Z","updated":"2024-08-05T08:38:06.301Z","title":"In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g.…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.36013,"kevAdded":null},{"id":"CVE-2018-12544","published":"2018-10-10T20:00:00.000Z","updated":"2024-08-05T08:38:06.199Z","title":"In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against XML…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.02172,"kevAdded":null},{"id":"CVE-2018-12542","published":"2018-10-10T20:00:00.000Z","updated":"2024-08-05T08:38:06.140Z","title":"In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory,…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.02224,"kevAdded":null},{"id":"CVE-2018-12541","published":"2018-10-10T20:00:00.000Z","updated":"2024-08-05T08:38:06.089Z","title":"In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding…","severity":"MEDIUM","score":6.5,"vendor":"The Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.02652,"kevAdded":null},{"id":"CVE-2018-12539","published":"2018-08-14T19:00:00.000Z","updated":"2024-08-05T08:38:06.190Z","title":"In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same…","severity":"HIGH","score":7.8,"vendor":"The Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2018-12537","published":"2018-08-14T19:00:00.000Z","updated":"2024-08-05T08:38:06.072Z","title":"In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.02482,"kevAdded":null},{"id":"CVE-2018-12540","published":"2018-07-12T14:00:00.000Z","updated":"2024-08-05T08:38:05.970Z","title":"In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This…","severity":"HIGH","score":8.8,"vendor":"The Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.01994,"kevAdded":null},{"id":"CVE-2018-12536","published":"2018-06-27T17:00:00.000Z","updated":"2024-08-05T08:38:06.220Z","title":"In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.04235,"kevAdded":null},{"id":"CVE-2017-7658","published":"2018-06-26T17:00:00.000Z","updated":"2024-08-05T16:12:27.826Z","title":"In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.18996,"kevAdded":null},{"id":"CVE-2017-7657","published":"2018-06-26T16:00:00.000Z","updated":"2024-08-05T16:12:27.850Z","title":"In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled),…","severity":"CRITICAL","score":9.8,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.14371,"kevAdded":null},{"id":"CVE-2017-7656","published":"2018-06-26T15:00:00.000Z","updated":"2024-08-05T16:12:27.819Z","title":"In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.06107,"kevAdded":null},{"id":"CVE-2018-12538","published":"2018-06-22T19:00:00.000Z","updated":"2024-08-05T08:38:06.131Z","title":"In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is…","severity":"HIGH","score":8.8,"vendor":"The Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.0256,"kevAdded":null},{"id":"CVE-2017-7654","published":"2018-06-05T20:00:00.000Z","updated":"2024-08-05T16:12:27.955Z","title":"In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.02176,"kevAdded":null},{"id":"CVE-2017-7653","published":"2018-06-05T20:00:00.000Z","updated":"2024-08-05T16:12:27.869Z","title":"The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that do reject…","severity":"MEDIUM","score":5.3,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.01444,"kevAdded":null},{"id":"CVE-2017-7652","published":"2018-04-25T13:00:00.000Z","updated":"2024-08-05T16:12:27.742Z","title":"In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.01621,"kevAdded":null},{"id":"CVE-2017-7651","published":"2018-04-24T14:00:00.000Z","updated":"2024-08-05T16:12:27.908Z","title":"In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can…","severity":"HIGH","score":7.5,"vendor":"The Eclipse Foundation","product":"Eclipse Mosquitto","kev":false,"epss":0.05116,"kevAdded":null},{"id":"CVE-2017-7650","published":"2017-09-11T16:00:00.000Z","updated":"2024-09-16T20:43:01.173Z","title":"In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely…","severity":"MEDIUM","score":6.5,"vendor":"Eclipse Foundation","product":"Mosquitto","kev":false,"epss":0.02472,"kevAdded":null},{"id":"CVE-2017-7649","published":"2017-09-11T16:00:00.000Z","updated":"2024-09-16T17:34:17.160Z","title":"The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured.…","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse Kura Installer","kev":false,"epss":0.01647,"kevAdded":null}]}