Eclipse Foundation vulnerabilities
310 CVEs and advisories name Eclipse Foundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-6194In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) r
- CVE-2023-5676Eclipse OpenJ9 possible infinite busy hang
- CVE-2023-4218XXE in eclipse.platform / Eclipse IDE
- CVE-2023-4043Parsson DoS when parsing numbers from untrusted sources
- CVE-2023-5763Glassfish remote code execution
- CVE-2023-4760Remote Code Execution in Eclipse RAP on Windows
- CVE-2023-4759Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write
- CVE-2023-2597In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size o
- CVE-2017-7650In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'.
- CVE-2017-7649The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules