Vulnerability search

Batch lookup →

Active filters:eclipse clear all

150 matches

CVE

Title

Severity

CVE-2025-8671
http/2 Implementierungen: Schwachstelle ermöglicht Denial of Service2 sources· bsi_warning · cve
mediumPoCEPSS 3.5%
124.0
7.5
88.4%
2026-09-02 10:21 UTC
CVE-2026-2332
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing4 sources· bsi_warning · osv_advisory · cve
criticalEPSS 1.3%
108.1
9.1
68.8%
2026-08-27 08:57 UTC
CVE-2026-2587
A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template…4 sources· euvd_advisory · cve · osv_advisory
criticalPoCEPSS 0.7%
104.1
9.6
48.6%
2026-05-19 15:31 UTC
CVE-2026-2586
GlassFish's Administration Console is Vulnerable to RCE4 sources· cve · osv_advisory · euvd_advisory
criticalPoCEPSS 0.8%
103.4
9.1
55.8%
2026-05-19 15:31 UTC
CVE-2025-5115
In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2…
highEPSS 3.5%
102.8
—
88.3%
2025-08-20 19:07 UTC
CVE-2025-48989
Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the…
highEPSS 3.5%
101.8
7.5
88.4%
2025-08-13 12:11 UTC
CVE-2018-12547
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native…
criticalEPSS 2.7%
100.2
9.8
85.3%
2019-02-11 15:00 UTC
CVE-2026-9158
In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to…2 sources· cve
criticalEPSS 0.6%
99.8
9.8
46.6%
2026-06-18 14:17 UTC
CVE-2022-29246
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack.2 sources· cve
criticalEPSS 2.3%
99.3
9.8
82.0%
2022-05-24 15:15 UTC
CVE-2018-12549
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the…
criticalEPSS 2.3%
98.5
9.8
82.5%
2019-02-11 15:00 UTC
CVE-2026-1605
The Eclipse Jetty Server Artifact has a Gzip request memory leak4 sources· bsi_warning · cve · osv_advisory
highEPSS 0.7%
97.0
7.5
49.8%
2026-08-27 08:57 UTC
CVE-2023-48694
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated…2 sources· cve
criticalEPSS 1.3%
94.3
9.8
69.4%
2023-12-05 01:15 UTC
CVE-2026-63252
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release…2 sources· cve
highEPSS 0.4%
94.0
7.5
35.4%
2026-08-04 13:18 UTC
CVE-2022-36063
Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with…2 sources· cve
criticalEPSS 1.7%
94.0
9.8
75.0%
2022-10-10 21:15 UTC
CVE-2026-60007
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable…2 sources· cve
criticalEPSS 0.4%
93.7
7.4
31.5%
2026-08-04 13:18 UTC
CVE-2023-48695
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated…2 sources· cve
criticalEPSS 1.2%
92.9
9.8
67.1%
2023-12-05 01:15 UTC
CVE-2018-12545
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions…2 sources· cve
highEPSS 5.1%
92.6
7.5
91.9%
2019-03-27 20:29 UTC
CVE-2026-6918
In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer…3 sources· cve · euvd_advisory
highEPSS 0.5%
92.4
7.5
41.9%
2026-05-05 13:16 UTC
CVE-2023-48697
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated…2 sources· cve
criticalEPSS 1.2%
92.1
9.8
66.0%
2023-12-05 01:15 UTC
CVE-2026-24457
An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote…2 sources· cve
criticalEPSS 0.6%
91.0
9.1
47.1%
2026-03-05 19:16 UTC
CVE-2026-12605
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources…2 sources· cve
criticalEPSS 0.3%
90.6
9.6
21.5%
2026-08-06 14:16 UTC
CVE-2026-60009
In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST…2 sources· cve
highEPSS 0.4%
90.5
8.8
30.0%
2026-08-05 11:16 UTC
CVE-2026-61891
In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP…2 sources· cve
highEPSS 0.4%
90.0
7.5
37.8%
2026-08-05 12:18 UTC
CVE-2025-55163
Netty is an asynchronous, event-driven network application framework.
highPoCEPSS 1.1%
89.5
—
62.2%
2025-08-13 14:17 UTC
CVE-2026-46581
In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not…2 sources· cve
highEPSS 0.4%
89.4
7.5
36.7%
2026-08-05 12:18 UTC