Vendor
The Eclipse Foundation
107 known vulnerabilities.
Products
Eclipse Jetty 23
Eclipse Mosquitto 16
Eclipse OpenJ9 14
Eclipse Kura 9
Eclipse Vert.x 6
Eclipse Theia 6
Eclipse OMR 3
Eclipse Californium 3
Eclipse BIRT 2
Eclipse Che 2
Eclipse Memory Analyzer 2
Eclipse hawkBit 2
Eclipse Hono 2
Eclipse GlassFish 1
Eclipse TinyDTLS 1
Eclipse Buildship 1
Eclipse Lyo 1
Eclipse Paho 1
Eclipse Paho MQTT C Client 1
Eclipse BIRT (Business Intelligence Reporting Tool) 1
@theia/plugin-ext 1
Eclipse Xtext 1
Eclipse Vorto 1
Eclipse Equinox p2 1
Eclipse Equinox 1
Eclipse Web Tools Platform 1
Eclipse Platform 1
Jakarta Expression Language Implementation 1
Eclipse Jersey 1
Eclipse Sphinx 1
2 results · Clear filters · Feed
-
High 7.5
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
-
High —CVE-2018-12540 Public exploit
High severity vulnerability that affects io.vertx:vertx-web
In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.