4700 matches found
CVE-2025-12383 Race Condition allows Bypass of Trust Restrictions
In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...
CVE-2025-12383
CVE-2025-12383 is a race-condition vulnerability in Eclipse Jersey that can cause ignoring of critical SSL configurations (e.g., mutual authentication, custom key/trust stores), potentially enabling unauthorized trust in insecure servers. Affected assets in the provided IBM context include IBM St...
CVE-2025-12383 Race Condition allows Bypass of Trust Restrictions
In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...
Eclipse Jersey 竞争条件问题漏洞
Eclipse Jersey is a Java Web services development framework from the Eclipse Foundation. A Competitive Conditions Issue vulnerability exists in Eclipse Jersey versions 2.45, 3.0.16, and 3.1.9, which stems from a competitive condition that could lead to the omission of critical SSL configurations,...
CVE-2025-12383: Concurrent Execution using Shared Resource with Improper Synchronization
In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...
PT-2025-47323
Name of the Vulnerable Software and Affected Versions Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 Description A race condition in Eclipse Jersey’s SSL configuration processing can lead to the ignoring of critical SSL configurations, including mutual authentication and custom key/trust stores. Thi...
Malicious code in chai-schema-plutology-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1af430a378f890314e0bea7438fcf10fcaf30c0fc8e9081257df836dd6841a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eclipse-triton-avior-yonder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e452f33f4d946135197dd190e23dc7ccad92501decc88c03373713cb28a1fcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175775
Malicious code in uranology-less-markdown-pdf-eclipse npm...
EUVD-2025-175743
Malicious code in vega-eclipse-paleoclimatology-lacerta npm...
EUVD-2025-176939
Malicious code in public-eclipse-wavefunction-entanglement npm...
EUVD-2025-176624
Malicious code in robotics-auriga-eclipse-parcel npm...
EUVD-2025-178721
Malicious code in geodynamo-callback-less-eclipse npm...
EUVD-2025-178282
Malicious code in javascript-start-halley-eclipse npm...
EUVD-2025-178279
Malicious code in jekyll-nightmare-juno-eclipse npm...
EUVD-2025-178009
Malicious code in luminescence-chai-cryonics-eclipse npm...
EUVD-2025-179642
Malicious code in commitizen-eclipse-sadr-chariklo npm...
EUVD-2025-179636
Malicious code in commitlint-chalk-eclipse-init npm...