Vulnerabilities in eclipse

14 results

Vexday analysis

Eclipse apresenta 9 vulnerabilidades conhecidas sem registros de exploração ativa em campo. Nenhuma falha crítica ou publicação recente foi identificada, indicando risco contido e maduro. A fraqueza dominante concentra-se em CWE-400 (consumo descontrolado de recursos), típica de problemas de negação de serviço.

CVE-2021-32835—Groovy Sandbox escape in Eclipse KetiEPSS 4.6%CVE-2023-36478HIGHHTTP/2 HPACK integer overflow and buffer allocationEPSS 3.8%CVE-2023-26048MEDIUMOutOfMemoryError for large multipart without filename in Eclipse JettyEPSS 3.3%CVE-2021-38443MEDIUMEclipse CycloneDDS Improper Handling of Syntactically Invalid StructureEPSS 2.1%CVE-2021-38441MEDIUMEclipse CycloneDDS Write-what-where ConditionEPSS 2.0%CVE-2023-26049LOWCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse JettyEPSS 1.3%CVE-2023-40167MEDIUMJetty accepts "+" prefixed value in Content-LengthEPSS 1.1%CVE-2023-36479LOWJetty vulnerable to errant command quoting in CGI ServletEPSS 1.0%CVE-2021-32834HIGHArbitrary Groovy script evaluation in Eclipse KetiEPSS 0.9%CVE-2023-41900LOWJetty's OpenId Revoked authentication allows one requestEPSS 0.8%CVE-2023-5632HIGHUnconditionally adding an event to the epoll causes excessive CPU consumptionEPSS 0.7%CVE-2023-3592MEDIUMIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property typEPSS 0.7%CVE-2023-0809MEDIUMIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.EPSS 0.6%CVE-2022-36022MEDIUMSome Deeplearning4J packages use unclaimed s3 bucket in tests and examplesEPSS 0.4%