3874 matches found
Moderate: Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.1.5 security update
An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...
Eclipse Theia 安全漏洞
Eclipse Theia is the Eclipse Foundation's set of open source IDE frameworks for desktop and web applications based on Visual Studio Code. A security vulnerability exists in the version of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, which originates from Webview content that...
MQTT Buffer Overflow Vulnerability
MQTT Message Queuing Telemetry Transport is a messaging protocol based on the Publish/Subscribe paradigm under the ISO standard ISO/IEC PRF 20922, which works on the TCP/IP protocol family and is designed as a publish/subscribe messaging protocol for remote devices with low hardware performance a...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Eclipse Jetty
CVE-2021-34429 POC for CVE-2021-34429 - Eclipse Jetty 11.0.5 S...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
UBUNTU-CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
Code injection
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
Eclipse Jetty 11.0.5 - Sensitive File Disclosure Vulnerability
Exploit Title: Eclipse Jetty 11.0.5 - Sensitive File Disclosure Exploit Author: Mayank Deshmukh Vendor Homepage: https://www.eclipse.org/jetty/ Software Link: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/ Version: 9.4.37 ≤ version ColdFusionX - Web Application...
Eclipse Jetty 11.0.5 - Sensitive File Disclosure
Exploit Title: Eclipse Jetty 11.0.5 - Sensitive File Disclosure Date: 2021-11-03 Exploit Author: Mayank Deshmukh Vendor Homepage: https://www.eclipse.org/jetty/ Software Link: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/ Version: 9.4.37 ≤ version ColdFusionX - Web Applicat...
CVE-2021-41036
The connected Red Hat/NVD/EUVD/etc. entries confirm CVE-2021-41036 affects the Eclipse Paho MQTT C Client. Before version 1.1, the client does not check the rem_len size in readpacket, which is the root cause described across the sources. The documents do not provide explicit mitigation steps or ...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
MQTT 缓冲区错误漏洞
MQTT Message Queuing Telemetry Transport is a messaging protocol based on the Publish/Subscribe paradigm under the ISO standard ISO/IEC PRF 20922, which works on the TCP/IP protocol family and is designed as a publish/subscribe messaging protocol for remote devices with low hardware performance a...
Privilege Escalation
rh-eclipse is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authentication when a user request to the local help web server...
CVE-2021-41035
In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods...