Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.6Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE).EPSS 0.1%Mar 20, 2026
- High8.1Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is decla…EPSS 0.4%Mar 20, 2026
- Critical9.1When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.EPSS 0.5%Mar 19, 2026
- High8.1Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is decla…EPSS 0.3%Mar 19, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.EPSS 0.5%Mar 18, 2026
- High8.6A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted…EPSS 0.5%Mar 18, 2026
- High7.1Default credentials set for local privileged user in Virtual Appliance.Mar 6, 2026
- Low2.7Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited…EPSS 0.2%Feb 27, 2026
- Medium5.0Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to terminate cer…EPSS 0.2%Feb 27, 2026
- Medium5.9VMWare Workstation and Fusion contain a logic flaw in the management of network packets.EPSS 0.2%Feb 26, 2026
- High7.2VMware Aria Operations contains a privilege escalation vulnerability.EPSS 0.7%Feb 25, 2026
- Critical9.0VMware Aria Operations contains a stored cross-site scripting vulnerability.EPSS 0.4%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityKEVEPSS 18.1%Feb 25, 2026
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityKEVEPSS 8.4%Sep 29, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock…EPSS 0.2%Mar 12, 2025
- Medium6.0VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityKEVEPSS 1.8%Mar 4, 2025
- High8.2VMware ESXi Arbitrary Write VulnerabilityKEVEPSS 1.0%Mar 4, 2025
- High8.2VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityKEVEPSS 1.6%Mar 4, 2025
- Critical9.8VMware vCenter Server Privilege Escalation VulnerabilityKEVEPSS 17.4%Sep 17, 2024
- Critical9.8VMware vCenter Server Heap-Based Buffer Overflow VulnerabilityKEVEPSS 54.6%Sep 17, 2024
- High7.2VMware ESXi Authentication Bypass VulnerabilityKEVEPSS 26.8%Jun 25, 2024
- Critical9.8Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityKEVEPSS 22.4%Jun 17, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().EPSS 0.6%May 30, 2024
- Critical9.8VMware vCenter Server Out-of-Bounds Write VulnerabilityKEVEPSS 99.4%Oct 25, 2023
- Low3.9VMware Tools Authentication Bypass VulnerabilityKEVEPSS 13.5%Jun 13, 2023