Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.6Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a b…EPSS 1.2%Mar 24, 2026
- Medium5.9Use of Java scripting engine enabled (e.g.EPSS 0.4%Mar 20, 2026
- Low2.6Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE).EPSS 0.1%Mar 20, 2026
- High8.1Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is decla…EPSS 0.4%Mar 20, 2026
- Critical9.1When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.EPSS 0.5%Mar 19, 2026
- High8.1Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is decla…EPSS 0.3%Mar 19, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.EPSS 0.5%Mar 18, 2026
- High8.6A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted…EPSS 0.5%Mar 18, 2026
- High7.1Default credentials set for local privileged user in Virtual Appliance.EPSS 0.3%Mar 6, 2026
- Low2.7Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited…EPSS 0.2%Feb 27, 2026
- Medium5.0Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to terminate cer…EPSS 0.2%Feb 27, 2026
- Medium5.9VMWare Workstation and Fusion contain a logic flaw in the management of network packets.EPSS 0.2%Feb 26, 2026
- High7.2VMware Aria Operations contains a privilege escalation vulnerability.EPSS 0.7%Feb 25, 2026
- Critical9.0VMware Aria Operations contains a stored cross-site scripting vulnerability.EPSS 0.4%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityKEVEPSS 18.1%Feb 25, 2026
- UnknownVMware Products Guest Privilege Escalation VulnerabilityKEVFeb 9, 2026
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityKEVEPSS 8.4%Sep 29, 2025
- UnknownVMware cloud_foundation Deserialization of Untrusted DataKEVSep 3, 2025
- UnknownVMware Workspace ONE Access and Identity Manager Improper AuthenticationKEVSep 3, 2025
- UnknownVmware vSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityKEVJun 7, 2025
- Critical9.4The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the databaseEPSS 50.0%May 13, 2025
- High8.2VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability.EPSS 36.0%May 13, 2025
- Medium6.1VMware Tools contains an insecure file handling vulnerability.EPSS 27.0%May 12, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock…EPSS 0.2%Mar 12, 2025
- Medium6.0VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityKEVEPSS 1.8%Mar 4, 2025