Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: The Eclipse Foundation Eclipse Mosquitto unspecified Clear all filters
TI-2017-05291 CVE-2017-7655 · GHSA-gg85-hmcj-cx9p

NULL pointer dereference in Eclipse Mosquitto

Priority LOW 36

In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01762 Published 2019-03-27 No fix listed CWE-476
TI-2018-09010 CVE-2018-12551 · GHSA-5hh6-jrm5-mqxq

Improper authentication in Eclipse Mosquitto

Priority LOW 38

When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any malformed data in the password file will be treated as valid.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01475 Published 2019-03-27 No fix listed CWE-703
TI-2018-09005 CVE-2018-12546 · GHSA-mx88-h56f-w25v

Improper access control in Eclipse Mosquitto

Priority LOW 30

In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscri…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00802 Published 2019-03-27 No fix listed CWE-284