| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-0728 | Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow | Eclipse Foundation | ThreadX | 中危 | - | 2025-02-21 08:16:16 | Deep Dive |
| CVE-2025-0726 | Eclipse ThreadX NetX Duo HTTP server denial of service | Eclipse Foundation | ThreadX | 中危 | - | 2025-02-21 08:12:12 | Deep Dive |
| CVE-2025-1007 | Improper Authorization in /user/namespace/{namespace}/details | Eclipse Foundation | OpenVSX | 中危 | - | 2025-02-19 08:40:58 | Deep Dive |
| CVE-2024-10917 | Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength | Eclipse Foundation | Open J9 | Low | 3.7 | 2024-11-11 16:55:11 | Deep Dive |
| CVE-2024-3935 | Eclipse Mosquito: Double free vulnerability | Eclipse Foundation | mosquitto | - | - | 2024-10-30 11:45:24 | Deep Dive |
| CVE-2024-10525 | Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback | Eclipse Foundation | mosquitto | 高危 | - | 2024-10-30 11:41:09 | Deep Dive |
| CVE-2024-8184 | Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks | Eclipse Foundation | Jetty | Medium | 5.9 | 2024-10-14 15:09:38 | Deep Dive |
| CVE-2024-6762 | Jetty PushSessionCacheFilter can cause remote DoS attacks | Eclipse Foundation | Jetty | Low | 3.1 | 2024-10-14 15:07:11 | Deep Dive |
| CVE-2024-6763 | Jetty URI parsing of invalid authority | Eclipse Foundation | Jetty | Low | 3.7 | 2024-10-14 15:06:07 | Deep Dive |
| CVE-2024-9823 | Jetty DOS vulnerability on DosFilter | Eclipse Foundation | Jetty | Medium | 5.3 | 2024-10-14 15:03:02 | Deep Dive |
| CVE-2024-8376 | Memory leak | Eclipse Foundation | Mosquitto | 高危 | - | 2024-10-11 15:18:54 | Deep Dive |
| CVE-2024-9329 | Glassfish redirect to untrusted site | Eclipse Foundation | Glassfish | 中危 | - | 2024-09-30 07:11:54 | Deep Dive |
| CVE-2024-9202 | EDC DataSetResolver policy filtering missing | Eclipse Foundation | Eclipse Dataspace Components | - | - | 2024-09-27 09:35:59 | Deep Dive |
| CVE-2024-8642 | Eclipse EDC: Consumer pull transfer token validation checks not applied | Eclipse Foundation | Eclipse EDC Connector | - | - | 2024-09-11 13:34:28 | Deep Dive |
| CVE-2024-8646 | Eclipse Glassfish: URL redirection vulnerability to untrusted sites | Eclipse Foundation | Eclipse Glassfish | Medium | 6.1 | 2024-09-11 13:26:47 | Deep Dive |
| CVE-2024-8391 | Eclipse Vert.x gRPC server does not limit the maximum message size | Eclipse Foundation | Eclipse Vert.x | - | - | 2024-09-04 15:27:58 | Deep Dive |
| CVE-2023-7272 | Eclipse Parsson stack overflow with deeply nested objects | Eclipse Foundation | Parsson | High | 8.6 | 2024-07-17 15:00:20 | Deep Dive |
| CVE-2024-3933 | Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a buffer | Eclipse Foundation | Open J9 | Medium | 5.3 | 2024-05-27 06:08:16 | Deep Dive |
| CVE-2024-5165 | Eclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of Input | Eclipse Foundation | Eclipse Ditto | Medium | 6.5 | 2024-05-23 09:56:32 | Deep Dive |
| CVE-2024-4536 | Eclipse EDC: OAuth2 Credential Exfiltration Vulnerability | Eclipse Foundation | EDC | Medium | 6.8 | 2024-05-07 13:11:45 | Deep Dive |