Vulnerabilidades em Eclipse
14 resultadosAnálise Vexday
Eclipse apresenta 5 vulnerabilidades registradas na base do Vexday, nenhuma delas ativa em campanhas de exploração conhecidas e nenhuma com severidade crítica. Não há registros de divulgações recentes (últimos 90 dias), indicando um panorama de risco estável e sem pressão imediata de ameaças. A fraqueza predominante catalogada é CWE-123, sugerindo padrões específicos de exposição que merecem atenção em avaliações de segurança mais detalhadas.
CVE-2021-32835—Groovy Sandbox escape in Eclipse KetiEPSS 4.6%CVE-2023-36478HIGHHTTP/2 HPACK integer overflow and buffer allocationEPSS 3.8%CVE-2023-26048MEDIUMOutOfMemoryError for large multipart without filename in Eclipse JettyEPSS 3.3%CVE-2021-38443MEDIUMEclipse CycloneDDS Improper Handling of Syntactically Invalid StructureEPSS 2.1%CVE-2021-38441MEDIUMEclipse CycloneDDS Write-what-where ConditionEPSS 2.0%CVE-2023-26049LOWCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse JettyEPSS 1.3%CVE-2023-40167MEDIUMJetty accepts "+" prefixed value in Content-LengthEPSS 1.1%CVE-2023-36479LOWJetty vulnerable to errant command quoting in CGI ServletEPSS 1.0%CVE-2021-32834HIGHArbitrary Groovy script evaluation in Eclipse KetiEPSS 0.9%CVE-2023-41900LOWJetty's OpenId Revoked authentication allows one requestEPSS 0.8%CVE-2023-5632HIGHUnconditionally adding an event to the epoll causes excessive CPU consumptionEPSS 0.7%CVE-2023-3592MEDIUMIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property typEPSS 0.7%CVE-2023-0809MEDIUMIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.EPSS 0.6%CVE-2022-36022MEDIUMSome Deeplearning4J packages use unclaimed s3 bucket in tests and examplesEPSS 0.4%