Lucene search
+L

3716 matches found

Github Security Blog
Github Security Blog
added 2025/11/18 6:32 p.m.8 views

Eclipse Jersey has a Race Condition

In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...

9.4CVSS6.8AI score0.00284EPSS
SaveExploits0References13Affected Software1
NVD
NVD
added 2025/11/18 4:15 p.m.8 views

CVE-2025-12383

In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...

9.4CVSS0.00284EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/18 3:14 p.m.3 views

CVE-2025-12383 Race Condition allows Bypass of Trust Restrictions

In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...

9.4CVSS6.3AI score0.00284EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/18 3:14 p.m.510 views

CVE-2025-12383

CVE-2025-12383 is a race-condition vulnerability in Eclipse Jersey that can cause ignoring of critical SSL configurations (e.g., mutual authentication, custom key/trust stores), potentially enabling unauthorized trust in insecure servers. Affected assets in the provided IBM context include IBM St...

9.4CVSS6.3AI score0.00284EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/18 3:14 p.m.11 views

CVE-2025-12383 Race Condition allows Bypass of Trust Restrictions

In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...

9.4CVSS0.00284EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.7 views

PT-2025-47323

Name of the Vulnerable Software and Affected Versions Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 Description A race condition in Eclipse Jersey’s SSL configuration processing can lead to the ignoring of critical SSL configurations, including mutual authentication and custom key/trust stores. Thi...

9.4CVSS6.7AI score0.00284EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.10 views

Eclipse Jersey 竞争条件问题漏洞

Eclipse Jersey is a Java Web services development framework from the Eclipse Foundation. A Competitive Conditions Issue vulnerability exists in Eclipse Jersey versions 2.45, 3.0.16, and 3.1.9, which stems from a competitive condition that could lead to the omission of critical SSL configurations,...

9.4CVSS6.1AI score0.00284EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/13 3:23 a.m.5 views

EUVD-2025-179636

Malicious code in commitlint-chalk-eclipse-init npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-175743

Malicious code in vega-eclipse-paleoclimatology-lacerta npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.3 views

EUVD-2025-178721

Malicious code in geodynamo-callback-less-eclipse npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.7 views

EUVD-2025-178302

Malicious code in janus-regulus-eclipse-castor npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-180248

Malicious code in atlas-repository-nova-eclipse npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.2 views

EUVD-2025-176939

Malicious code in public-eclipse-wavefunction-entanglement npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.3 views

EUVD-2025-175775

Malicious code in uranology-less-markdown-pdf-eclipse npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-179204

Malicious code in eclipse-hercules-europa-prettier-plugin-markdown npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-179200

Malicious code in eclipse-ursa-element-ui-middleware npm...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/11/13 3:23 a.m.4 views

MAL-2025-186678 Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c819411e05d0061457e9887c6906e3929d2896491c60dcced2f30818f4ef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/13 3:23 a.m.8 views

Malicious code in eclipse-triton-avior-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e452f33f4d946135197dd190e23dc7ccad92501decc88c03373713cb28a1fcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.3 views

EUVD-2025-180308

Malicious code in asteroid-winston-eclipse-hugo npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.5 views

EUVD-2025-179202

Malicious code in eclipse-parsec-native-commitlint-config-angular npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder