Vulnerability index

Browse CVEs

246 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Threadx Netx Duo HIGH 7.5
CVE-2025-55094

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_icmpv6_…

Fix: 6.4.4.202503+
Fix from $1,950 2025-10-17
Threadx Usbx MEDIUM 6.1
CVE-2025-55096

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_repo…

Fix: 6.4.3.202503+
Fix from $1,600 2025-10-17
Threadx Usbx MEDIUM 6.1
CVE-2025-55097

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_st…

Fix: 6.4.3.202503+
Fix from $1,600 2025-10-17
Threadx Usbx MEDIUM 6.1
CVE-2025-55098

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_de…

Fix: 6.4.3.202503+
Fix from $1,600 2025-10-17
Threadx Netx Duo HIGH 7.5
CVE-2025-55087

In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted …

Fix: 6.4.4.202503+
Fix from $1,950 2025-10-17
Threadx Netx Duo MEDIUM 5.3
CVE-2025-55092

In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read is…

Fix: 6.4.4.202503+
Fix from $1,600 2025-10-17
Threadx Netx Duo MEDIUM 5.3
CVE-2025-55093

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_pac…

Fix: 6.4.4.202503+
Fix from $1,600 2025-10-17
Threadx Netx Duo MEDIUM 6.5
CVE-2025-55091

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packe…

Fix: 6.4.4.202503+
Fix from $1,600 2025-10-16
Threadx Filex CRITICAL 9.8
CVE-2025-55089

In FileX before 6.4.2, the file support module for Eclipse Foundation ThreadX, there was a possible buffer overflow in the FileX RAM disk driver. It …

Fix: 6.4.2+
Fix from $2,300 2025-10-16
Threadx Netx Duo MEDIUM 6.5
CVE-2025-55090

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_pac…

Fix: 6.4.4.202503+
Fix from $1,600 2025-10-16
Threadx Netx Duo MEDIUM 5.3
CVE-2025-55084

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_s…

Fix: 6.4.4.202503+
Fix from $1,600 2025-10-16
Threadx Netx Duo MEDIUM 5.3
CVE-2025-55083

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of boun…

Fix: 6.4.4.202503+
Fix from $1,600 2025-10-15
Threadx Netx Duo CRITICAL 9.1
CVE-2025-55081

In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification …

Fix: 6.4.4.202503+
Fix from $2,300 2025-10-15
Threadx Netx Duo MEDIUM 5.3
CVE-2025-55082

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read in _nx_secure_tls_process_clie…

Fix: after 6.4.3
Fix from $1,600 2025-10-15
Threadx HIGH 7.1
CVE-2025-55080

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an …

Fix: 6.4.3+
Fix from $1,950 2025-10-15
Threadx MEDIUM 5.5
CVE-2025-55079

In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priority wasn't…

Fix: 6.4.3+
Fix from $1,600 2025-10-15
Threadx MEDIUM 5.5
CVE-2025-55078

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory re…

Fix: 6.4.3+
Fix from $1,600 2025-10-14
Jetty HIGH 7.5
CVE-2025-5115

In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM fra…

Fix: after 12.0.21
Fix from $1,950 2025-08-20
Jakarta Mail HIGH 7.5
CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different…

Fix: 1.6.8 / 2.0.2+
Fix from $1,950 2025-07-21
Glassfish CRITICAL 9.8
CVE-2024-9408

In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.

Mitigation only
Fix from $2,300 2025-07-16
Glassfish CRITICAL 9.8
CVE-2024-9342

In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed logi…

Mitigation only
Fix from $2,300 2025-07-16
Glassfish MEDIUM 6.1
CVE-2024-9343

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.

Mitigation only
Fix from $1,600 2025-07-16
Glassfish MEDIUM 5.4
CVE-2024-10031

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying …

Mitigation only
Fix from $1,600 2025-07-16
Glassfish MEDIUM 5.4
CVE-2024-10032

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.

Mitigation only
Fix from $1,600 2025-07-16
Glassfish MEDIUM 6.1
CVE-2024-10029

In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console.

Mitigation only
Fix from $1,600 2025-07-16
Open Vsx MEDIUM 5.3
CVE-2025-6705

A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions. Specifically, t…

Patch available
Fix from $1,600 2025-06-27
Jgit MEDIUM 5.3
CVE-2025-4949

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement t…

Fix: 5.13.4 / 6.10.1.202505221210+
Fix from $1,600 2025-05-21
Openj9 HIGH 7.8
CVE-2025-4447

In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that …

Fix: after 0.51.0
Fix from $1,950 2025-05-09
Jetty HIGH 7.5
CVE-2025-1948

In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_…

Fix: 12.0.17+
Fix from $1,950 2025-05-08
Jetty HIGH 7.2
CVE-2024-13009

In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This …

Fix: 9.4.57+
Fix from $1,950 2025-05-08