Browse CVEs

HIGH 7.5 CVE-2025-55094 In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_icmpv6_… Threadx Netx Duo 6.4.4.202503+ Fix from $1,9502025-10-17 MEDIUM 6.1 CVE-2025-55096 In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_repo… Threadx Usbx 6.4.3.202503+ Fix from $1,6002025-10-17 MEDIUM 6.1 CVE-2025-55097 In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_st… Threadx Usbx 6.4.3.202503+ Fix from $1,6002025-10-17 MEDIUM 6.1 CVE-2025-55098 In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_de… Threadx Usbx 6.4.3.202503+ Fix from $1,6002025-10-17 HIGH 7.5 CVE-2025-55087 In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted … Threadx Netx Duo 6.4.4.202503+ Fix from $1,9502025-10-17 MEDIUM 5.3 CVE-2025-55092 In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read is… Threadx Netx Duo 6.4.4.202503+ Fix from $1,6002025-10-17 MEDIUM 5.3 CVE-2025-55093 In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_pac… Threadx Netx Duo 6.4.4.202503+ Fix from $1,6002025-10-17 MEDIUM 6.5 CVE-2025-55091 In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packe… Threadx Netx Duo 6.4.4.202503+ Fix from $1,6002025-10-16 CRITICAL 9.8 CVE-2025-55089 In FileX before 6.4.2, the file support module for Eclipse Foundation ThreadX, there was a possible buffer overflow in the FileX RAM disk driver. It … Threadx Filex 6.4.2+ Fix from $2,3002025-10-16 MEDIUM 6.5 CVE-2025-55090 In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_pac… Threadx Netx Duo 6.4.4.202503+ Fix from $1,6002025-10-16 MEDIUM 5.3 CVE-2025-55084 In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_s… Threadx Netx Duo 6.4.4.202503+ Fix from $1,6002025-10-16 MEDIUM 5.3 CVE-2025-55083 In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of boun… Threadx Netx Duo 6.4.4.202503+ Fix from $1,6002025-10-15 CRITICAL 9.1 CVE-2025-55081 In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification … Threadx Netx Duo 6.4.4.202503+ Fix from $2,3002025-10-15 MEDIUM 5.3 CVE-2025-55082 In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read in _nx_secure_tls_process_clie… Threadx Netx Duo after 6.4.3 Fix from $1,6002025-10-15 HIGH 7.1 CVE-2025-55080 In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an … Threadx 6.4.3+ Fix from $1,9502025-10-15 MEDIUM 5.5 CVE-2025-55079 In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priority wasn't… Threadx 6.4.3+ Fix from $1,6002025-10-15 MEDIUM 5.5 CVE-2025-55078 In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory re… Threadx 6.4.3+ Fix from $1,6002025-10-14 HIGH 7.5 CVE-2025-5115 In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM fra… Jetty after 12.0.21 Fix from $1,9502025-08-20 HIGH 7.5 CVE-2025-7962 In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different… Jakarta Mail 1.6.8 / 2.0.2+ Fix from $1,9502025-07-21 CRITICAL 9.8 CVE-2024-9408 In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints. Glassfish Mitigation only Fix from $2,3002025-07-16 CRITICAL 9.8 CVE-2024-9342 In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed logi… Glassfish Mitigation only Fix from $2,3002025-07-16 MEDIUM 6.1 CVE-2024-9343 In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console. Glassfish Mitigation only Fix from $1,6002025-07-16 MEDIUM 5.4 CVE-2024-10031 In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying … Glassfish Mitigation only Fix from $1,6002025-07-16 MEDIUM 5.4 CVE-2024-10032 In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console. Glassfish Mitigation only Fix from $1,6002025-07-16 MEDIUM 6.1 CVE-2024-10029 In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console. Glassfish Mitigation only Fix from $1,6002025-07-16 MEDIUM 5.3 CVE-2025-6705 A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions. Specifically, t… Open Vsx Patch available Fix from $1,6002025-06-27 MEDIUM 5.3 CVE-2025-4949 In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement t… Jgit 5.13.4 / 6.10.1.202505221210+ Fix from $1,6002025-05-21 HIGH 7.8 CVE-2025-4447 In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that … Openj9 after 0.51.0 Fix from $1,9502025-05-09 HIGH 7.5 CVE-2025-1948 In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_… Jetty 12.0.17+ Fix from $1,9502025-05-08 HIGH 7.2 CVE-2024-13009 In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This … Jetty 9.4.57+ Fix from $1,9502025-05-08