Eclipse vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20223
3. 20239
4. 20262

Newest CVEs

• CVE-2023-54344

  Eclipse Equinox OSGi 3.7.2 Remote Code Execution via Console

  Eclipse · Equinox OSGi

  Critical9.3
• CVE-2023-54342

  Eclipse Equinox OSGi 3.8-3.18 Console Remote Code Execution

  Eclipse · Equinox OSGi

  Critical9.3
• CVE-2023-5632

  Unconditionally adding an event to the epoll causes excessive CPU consumption

  Eclipse · Mosquitto

  High7.5
• CVE-2023-36478

  HTTP/2 HPACK integer overflow and buffer allocation

  eclipse · jetty.project

  High7.5
• CVE-2023-3592

  In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.

  Eclipse · Mosquitto

  Medium5.8
• CVE-2023-0809

  In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

  Eclipse · Mosquitto

  Medium5.8
• CVE-2023-41900

  Jetty's OpenId Revoked authentication allows one request

  eclipse · jetty.project

  Low3.5
• CVE-2023-40167

  Jetty accepts "+" prefixed value in Content-Length

  eclipse · jetty.project

  Medium5.3
• CVE-2023-36479

  Jetty vulnerable to errant command quoting in CGI Servlet

  eclipse · jetty.project

  Low3.5
• CVE-2023-26049

  Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty

  eclipse · jetty.project

  Low2.4