Vulnerabilidades em Eclipse Foundation

296 resultados
Análise Vexday

Com 104 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, o Eclipse Foundation apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere menor pressão imediata de ameaças confirmadas em ambiente real. Ainda assim, 9 vulnerabilidades de severidade crítica e 16 surgidas nos últimos 90 dias indicam ritmo de descoberta que exige atenção contínua. O CVE-2024-10525 se destaca como a falha de maior risco ativo, com escore EPSS de 0,579 — valor que aponta probabilidade relevante de exploração a curto prazo e deve ser tratado com prioridade nos ciclos de correção. A predominância de CWE-125 (leitura fora dos limites do buffer) como tipo de falha mais frequente sinaliza que revisões de segurança de memória em componentes nativos merecem atenção estrutural no processo de desenvolvimento.

CVE-2026-102471MEDIUMCRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messagesEPSS 0.3%CVE-2026-4983MEDIUMOpen VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and serves them with Content-Type: image/svg+xmlEPSS 0.3%CVE-2026-102718HIGHOut-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER lengthEPSS 0.3%CVE-2026-102713HIGHUnbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stallEPSS 0.3%CVE-2026-106465MEDIUMMissing HelloVerifyRequest cookie validation in the NetX Secure DTLS serverEPSS 0.3%CVE-2026-102464HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClEPSS 0.3%CVE-2026-102463HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-clientEPSS 0.3%CVE-2026-19203HIGHA client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret difEPSS 0.3%CVE-2026-92611MEDIUMIn Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard EPSS 0.3%CVE-2025-12383CRITICALRace Condition allows Bypass of Trust RestrictionsEPSS 0.3%CVE-2026-18353HIGHUnauthenticated SSRF in PIA via OIDC issuer allowlist bypassEPSS 0.3%CVE-2026-92853HIGHOut-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX SecureEPSS 0.3%CVE-2026-92843HIGHOut-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX SecureEPSS 0.3%CVE-2026-16440MEDIUMIn Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.EPSS 0.3%CVE-2026-12606MEDIUMEclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveragEPSS 0.3%CVE-2025-55098LOWPotential out-of-bounds read in _ux_host_class_audio_device_type_get()EPSS 0.3%CVE-2025-11966LOWIn Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted inEPSS 0.3%CVE-2026-113620CRITICALEclipse ioFog operator WebSocket accepts an unverified JWTEPSS 0.3%CVE-2026-103415CRITICALWhen a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cooEPSS 0.3%CVE-2026-102466HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-clientEPSS 0.3%