Eclipse Foundation vulnerabilities
310 CVEs and advisories name Eclipse Foundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-55099Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()
- CVE-2025-55098Potential out-of-bounds read in _ux_host_class_audio_device_type_get()
- CVE-2025-55097Potential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get()
- CVE-2025-55096Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()
- CVE-2025-55094Potential out-of-bounds read in _nx_icmpv6_validate_options()
- CVE-2025-55093Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages
- CVE-2025-55092Potential out of bound read in _nx_ipv4_option_process()
- CVE-2025-55091Potential out of bound read in _nx_ip_packet_receive()
- CVE-2025-55090Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX Duo
- CVE-2025-55089Eclipse ThreadX FileX RAM disk driver buffer overflow
- CVE-2025-55084Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()
- CVE-2025-55083Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension()
- CVE-2025-55082Potential out of bound read and info leak in_nx_secure_tls_psk_identity_find()
- CVE-2025-55081Potential out of bound read in _nx_secure_tls_process_clienthello()
- CVE-2025-55080Improper Parameter Check in ThreadX Syscall Implementation
- CVE-2025-55079Missing check for thread priority
- CVE-2025-55078Incomplete validation of kernel object pointers in system calls
- CVE-2025-7962In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate
- CVE-2024-9408In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.
- CVE-2024-10032In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.
- CVE-2024-10031In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the un
- CVE-2024-10029In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console.
- CVE-2024-9343In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.
- CVE-2024-9342In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of fa
- CVE-2025-6705A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions.
- CVE-2025-4447Buffer Overflow in Eclipse OpenJ9
- CVE-2025-1948Eclipse Jetty HTTP clients can increase memory allocation
- CVE-2024-13009Eclipse Jetty GZIP buffer release
- CVE-2025-2259Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow
- CVE-2025-2260Eclipse ThreadX NetX Duo HTTP component server denial of service