eclipse Vulnerability Advisory Catalog

Total 271 security vulnerabilities recorded for eclipse software and firmware.

← Back to All Vendors
CVE-2017-9868 MEDIUM
Component: mosquitto

In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic inform...

📅 2017-06-25
CVSS 5.5 Dossier →
Component: jetty

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observ...

📅 2017-06-16
CVSS 7.5 Dossier →
CVE-2016-4800 CRITICAL
Component: jetty

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected reso...

📅 2017-04-13
CVSS 9.8 Dossier →
Component: tinydtls

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet...

📅 2017-03-24
CVSS 7.5 Dossier →
CVE-2010-4647 UNKNOWN
Component: eclipse_ide

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remot...

📅 2011-01-13
CVSS 4.3 Dossier →
CVE-2008-7271 UNKNOWN
Component: eclipse_ide

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow r...

📅 2011-01-13
CVSS 4.3 Dossier →
CVE-2009-4521 UNKNOWN
Component: birt

Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaK...

📅 2009-12-31
CVSS 4.3 Dossier →
Page 12 of 12 (271 Total Records)