Eclipse Foundation vulnerabilities
310 CVEs and advisories name Eclipse Foundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-2258Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow
- CVE-2024-10838Integer Underflow in DDS_Security_Deserialize_ methods may lead to OOB read
- CVE-2025-1471Eclipse OMR: Buffer overflow vulnerability
- CVE-2025-1470Eclipse OMR: Null pointer dereference vulnerability
- CVE-2025-0727Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow
- CVE-2025-0728Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow
- CVE-2025-0726Eclipse ThreadX NetX Duo HTTP server denial of service
- CVE-2025-1007Improper Authorization in /user/namespace/{namespace}/details
- CVE-2024-10917Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength
- CVE-2024-3935Eclipse Mosquito: Double free vulnerability
- CVE-2024-10525Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback
- CVE-2024-8184Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks
- CVE-2024-6762Jetty PushSessionCacheFilter can cause remote DoS attacks
- CVE-2024-6763Jetty URI parsing of invalid authority
- CVE-2024-9823Jetty DOS vulnerability on DosFilter
- CVE-2024-8376Memory leak
- CVE-2024-9329Glassfish redirect to untrusted site
- CVE-2024-9202EDC DataSetResolver policy filtering missing
- CVE-2024-8642Eclipse EDC: Consumer pull transfer token validation checks not applied
- CVE-2024-8646Eclipse Glassfish: URL redirection vulnerability to untrusted sites
- CVE-2024-8391Eclipse Vert.x gRPC server does not limit the maximum message size
- CVE-2023-7272Eclipse Parsson stack overflow with deeply nested objects
- CVE-2024-3933Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a buffer
- CVE-2024-5165Eclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of Input
- CVE-2024-4536Eclipse EDC: OAuth2 Credential Exfiltration Vulnerability
- CVE-2024-0740Eclipse Target Management <= 4.5.500 Command Injection
- CVE-2024-3046In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthe
- CVE-2024-2212Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()
- CVE-2024-2214Missing array size check in _Mtxinit() in the Xtensa port
- CVE-2024-2452Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()