Denial of Service

Every one of the 66 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “qualit…CVE-2020-27223The Eclipse Foundation · CVSS 5.2 · 78% likely

   CWE-407

2. In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.CVE-2021-28165The Eclipse Foundation · CVSS 7.5 · 54% likely

   CWE-400

3. In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an asser…CVE-2018-12543The Eclipse Foundation · 36% likely

   CWE-617

4. In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many…CVE-2018-12545The Eclipse Foundation · 5.1% likely

   CWE-400

5. In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authe…CVE-2017-7651The Eclipse Foundation · 5.1% likely

   CWE-789

6. OutOfMemoryError for large multipart without filename in Eclipse JettyCVE-2023-26048eclipse · CVSS 5.3 · 3.4% likely

   CWE-400

7. In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request bo…CVE-2018-12541The Eclipse Foundation · 2.7% likely

   CWE-789

8. In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active conne…CVE-2022-2048The Eclipse Foundation · CVSS 7.5 · 2.6% likely

   CWE-410

9. In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code path…CVE-2022-2191The Eclipse Foundation · CVSS 7.5 · 2.2% likely

   CWE-404

10. In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT packets which could ca…CVE-2017-7654The Eclipse Foundation · 2.2% likely

    CWE-401

11. In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from d…CVE-2017-7652The Eclipse Foundation · 1.6% likely

    CWE-789

12. In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a s…CVE-2019-9004Eclipse · 1.5% likely

    CWE-401

13. In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of…CVE-2021-41039The Eclipse Foundation · 1.4% likely

    CWE-1050

14. The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, a…CVE-2023-28366Eclipse · CVSS 7.5 · 1.3% likely

    CWE-401

15. Denial of Service (DoS)CVE-2022-25897Eclipse · CVSS 5.9 · 1.3% likely

    CWE-770

16. In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, whic…CVE-2021-34431The Eclipse Foundation · 1.1% likely

    CWE-401

17. Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacksCVE-2024-8184Eclipse Foundation · CVSS 5.9 · 1.0% likely

    CWE-400

18. Eclipse ThreadX NetX Duo HTTP component server denial of serviceCVE-2025-2260Eclipse Foundation · CVSS 7.1 · 1.0% likely

    CWE-459

19. Jetty PushSessionCacheFilter can cause remote DoS attacksCVE-2024-6762Eclipse Foundation · CVSS 3.1 · 0.9% likely

    CWE-400

20. Jetty DOS vulnerability on DosFilterCVE-2024-9823Eclipse Foundation · CVSS 5.3 · 0.9% likely

    CWE-400

21. Parsson DoS when parsing numbers from untrusted sourcesCVE-2023-4043Eclipse Foundation · CVSS 5.9 · 0.9% likely

    CWE-834

22. Unconditionally adding an event to the epoll causes excessive CPU consumptionCVE-2023-5632Eclipse · CVSS 7.5 · 0.8% likely

    CWE-834

23. Eclipse Jetty HTTP clients can increase memory allocationCVE-2025-1948Eclipse Foundation · CVSS 7.5 · 0.8% likely

    CWE-400

24. In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.CVE-2023-3592Eclipse · CVSS 5.8 · 0.8% likely

    CWE-401

25. Eclipse ThreadX NetX Duo HTTP server denial of serviceCVE-2025-0726Eclipse Foundation · CVSS 7.1 · 0.8% likely

    CWE-459

26. Memory leakCVE-2024-8376Eclipse Foundation · CVSS 7.2 · 0.7% likely

    CWE-401

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.