3541 matches found
MAL-2025-18164 Malicious code in decoherence-pulsar-eclipse-forever (npm)
The package decoherence-pulsar-eclipse-forever was found to contain malicious code...
MAL-2025-19184 Malicious code in eclipse-spectron-webdriver-venus-babel (npm)
The package eclipse-spectron-webdriver-venus-babel was found to contain malicious code...
Malicious code in aquarius-proxima-grunt-eclipse (npm)
The package aquarius-proxima-grunt-eclipse was found to contain malicious code...
Malicious code in backend-eclipse-taurus-charon (npm)
The package backend-eclipse-taurus-charon was found to contain malicious code...
Malicious code in wormhole-steganography-prettier-eclipse (npm)
The package wormhole-steganography-prettier-eclipse was found to contain malicious code...
MAL-2025-15088 Malicious code in auth0-apollo-astro-eclipse (npm)
The package auth0-apollo-astro-eclipse was found to contain malicious code...
MAL-2025-19185 Malicious code in eclipse-thuban-speleology-pipe (npm)
The package eclipse-thuban-speleology-pipe was found to contain malicious code...
MAL-2025-32096 Malicious code in repository-protractor-eclipse-proxima (npm)
The package repository-protractor-eclipse-proxima was found to contain malicious code...
MAL-2025-24089 Malicious code in juno-eclipse-pegasus-cygnus (npm)
The package juno-eclipse-pegasus-cygnus was found to contain malicious code...
MAL-2025-39465 Malicious code in wormhole-steganography-prettier-eclipse (npm)
The package wormhole-steganography-prettier-eclipse was found to contain malicious code...
MAL-2025-21188 Malicious code in ganymede-blaze-eclipse-arcturus (npm)
The package ganymede-blaze-eclipse-arcturus was found to contain malicious code...
openSUSE Security Advisory (SUSE-SU-2025:02762-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-32984
Name of the Vulnerable Software and Affected Versions AMPHP affected versions not specified Apache Tomcat affected versions not specified Eclipse Foundation affected versions not specified F5 affected versions not specified Fastly affected versions not specified gRPC affected versions not specifi...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : eclipse-jgit (SUSE-SU-2025:02762-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02762-1 advisory. - CVE-2025-4949: Fixed the XXE vulnerability in ManifestParser and AmazonS3 class bsc1243647. Tenable ha...
Security update for eclipse-jgit
This update for eclipse-jgit fixes the following issues: CVE-2025-4949: Fixed the XXE vulnerability in ManifestParser and AmazonS3 class bsc1243647. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...
SUSE-SU-2025:02762-1 Security update for eclipse-jgit
This update for eclipse-jgit fixes the following issues: - CVE-2025-4949: Fixed the XXE vulnerability in ManifestParser and AmazonS3 class bsc1243647...
Security Bulletin: Security vulnerability in jetty may affect IBM Business Automation Workflow - CVE-2024-6763
Summary IBM Business Automation Workflow is vulnerable packages a vulnerable copy of eclipse jetty. Vulnerability Details CVEID:CVE-2024-6763 DESCRIPTION: Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL...
WWBN, MedDream, Eclipse vulnerabilities
Cisco Talos' Vulnerability Discovery & Research team recently disclosed seven vulnerabilities in WWBN AVideo, four in MedDream, and one in an Eclipse ThreadX module. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco 's...
Linux Distros Unpatched Vulnerability : CVE-2024-13009
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result ...
Advisory ROSA-SA-2025-2912
software: mosquitto 2.0.20 WASP: ROSA-CHROME unaffected versions = mosquitto-2.0.20-1 affected versions mosquitto-2.0.20-1 CVE-ID: CVE-2024-3935 BDU-ID: 2024-09880 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Eclipse Mosquitto message broker is related to memory re-release. Exploitation of th...