3744 matches found
CVE-2019-17637
In all versions of Eclipse Web Tools Platform through release 3.18 2020-06, XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences...
CVE-2019-17637
In all versions of Eclipse Web Tools Platform through release 3.18 2020-06, XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences...
CVE-2019-17637
CVE-2019-17637 affects Eclipse Web Tools Platform up to version 3.18 (2020-06). The vulnerability arises in XML/DTD processing where external entities can cause local file contents to be sent to a remote server when files are edited or validated, even if external entity resolution is disabled. De...
The vulnerability of the Eclipse Mosquitto messaging broker, related to authentication process flaws, allows attackers to gain unauthorized access to protected information.
The vulnerability of the access control list configuration of the Eclipse Mosquitto broker lies in insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
Eclipse Jetty Vulnerability (CVE-2019-17638) - Linux
Eclipse Jetty is prone to a vulnerability where sensitive information about clients could be obtained. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
The vulnerability of the Eclipse Mosquitto messaging broker, related to authentication process flaws, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Eclipse Mosquitto messaging broker is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...
PT-2020-9930 · Eclipse · Eclipse Web Tools Platform
Name of the Vulnerable Software and Affected Versions: Eclipse Web Tools Platform versions prior to 3.18 2020-06 Description: The issue allows XML and DTD files referring to external entities to be exploited, sending the contents of local files to a remote server when edited or validated. This ca...
Eclipse Jetty Vulnerability (CVE-2019-17638) - Windows
Eclipse Jetty is prone to a vulnerability where sensitive information about clients could be obtained. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
The vulnerability of the Eclipse Mosquitto messaging broker, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Eclipse Mosquitto messaging broker is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...
Eclipse Jetty Information Disclosure Vulnerability (CNVD-2021-28269)
Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A security vulnerability exists in Eclipse Jetty versions 9.4.27.v20200227 through 9.4.29.v20200521. The vulnerability stems from an error in configuration or other errors in the operati...
CVE-2019-17638
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...
Design/Logic Flaw
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...
CVE-2019-17638
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...
CVE-2019-17638
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...
CVE-2019-17638
The CVE-2019-17638 entry concerns Eclipse Jetty (versions 9.4.27.v20200227 through 9.4.29.v20200521) where a too-large response header scenario leads to a double release of the ByteBuffer in the ByteBufferPool. This can allow two threads to racingly access the same ByteBuffer; as one thread prepa...
CVE-2019-17638
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...
Unspecified Vulnerability in Gossipsub
Gossipsub is a scalable benchmark pubsub protocol based on randomized topic grids and Gossip. A security vulnerability exists in Gossipsub version 1.0, which stems from the program's failure to implement relevant security protections against invalid spam messages. An attacker can exploit this...
CVE-2020-12821
Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack...