Log in Start free

Eclipse

Products

ProductCVEsExploitedLatest
jetty.project6–Oct 10, 2023
Mosquitto3–Oct 18, 2023
CycloneDDS2–May 5, 2022
Equinox OSGi2–May 5, 2026
keti2–Sep 9, 2021
deeplearning4j1–Nov 10, 2022

Exploited and recent CVEs

  • CVE-2023-54344 Critical 9.8 Eclipse Equinox OSGi 3.7.2 Remote Code Execution via Console 0.5%
  • CVE-2023-54342 Critical 9.8 Eclipse Equinox OSGi 3.8-3.18 Console Remote Code Execution 0.5%
  • CVE-2023-5632 High 7.5 Unconditionally adding an event to the epoll causes excessive CPU consumption 0.8%
  • CVE-2023-36478 High 7.5 HTTP/2 HPACK integer overflow and buffer allocation 4.8%
  • CVE-2023-3592 Medium 5.8 In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types. 0.8%
  • CVE-2023-0809 Medium 5.8 In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets. 0.7%
  • CVE-2023-41900 Low 3.5 Jetty's OpenId Revoked authentication allows one request 0.9%
  • CVE-2023-40167 Medium 5.3 Jetty accepts "+" prefixed value in Content-Length 1.3%
  • CVE-2023-36479 Low 3.5 Jetty vulnerable to errant command quoting in CGI Servlet 1.2%
  • CVE-2023-26049 Low 2.4 Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty 1.3%
  • CVE-2023-26048 Medium 5.3 OutOfMemoryError for large multipart without filename in Eclipse Jetty 3.4%
  • CVE-2022-36022 Medium 5.3 Some Deeplearning4J packages use unclaimed s3 bucket in tests and examples 0.4%
  • CVE-2021-38443 Medium 6.6 Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure 2.1%
  • CVE-2021-38441 Medium 6.6 Eclipse CycloneDDS Write-what-where Condition 2.1%
  • CVE-2021-32835 Unrated Groovy Sandbox escape in Eclipse Keti 4.6%
  • CVE-2021-32834 High 8.2 Arbitrary Groovy script evaluation in Eclipse Keti 0.9%