AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

VMware security advisories

126 advisories across VMware

Company profile
Medium 4.2Sep 15VMware sealed-secrets: observable discrepancyCVE-2026-59341no fix yetCritical 9.2Sep 11VMware UAA: improper access controlCVE-2026-47839no fix yetHigh 7.7Aug 29VMware bosh-vsphere-cpi-release: improper certificate validationCVE-2026-41012fixed in 98.0.6Medium 6.5Aug 27VMware Spring AMQP: resource leakCVE-2026-59320no fix yetMedium 4.2Aug 27VMware Spring Integration: race conditionCVE-2026-59321no fix yetMedium 6.3Aug 27VMware Spring Integration: improper input validationCVE-2026-59322no fix yetHigh 8.2Aug 27VMware Spring Integration: race conditionCVE-2026-59324no fix yetHigh 8.0Aug 27VMware Spring Integration: unsafe deserializationCVE-2026-59307no fix yetMedium 6.8Aug 27VMware Spring Integration: link followingCVE-2026-59311no fix yetCritical 9.8Aug 27Spring MVC applications using the functional web framework are vulnerable to...CVE-2026-59313no fix yetLow 3.7Aug 27Applications that build a Content-Disposition header value from untrusted input...CVE-2026-59314no fix yetMedium 5.3Aug 27VMware Spring Cloud Config: denial of serviceCVE-2026-59315no fix yetHigh 8.2Aug 27VMware Spring Authorization Server: cross-site scriptingCVE-2026-59316no fix yetMedium 6.5Aug 27VMware Spring for Apache Kafka: improper quantity validationCVE-2026-59317no fix yetMedium 4.3Aug 27VMware Spring AI: attacker could inject RediSearch syntaxCVE-2026-59319no fix yetLow 3.1Aug 27VMware Spring Cloud Function: improper input validationCVE-2026-59298no fix yetLow 3.1Aug 27Composition lookup can potentially poison base function in Spring Cloud FunctionCVE-2026-59299no fix yetLow 3.1Aug 27VMware Spring Cloud Function: secrets in logsCVE-2026-59300no fix yetLow 3.1Aug 27VMware Spring Cloud Function: secrets in logsCVE-2026-59301no fix yetLow 3.1Aug 27VMware Spring Cloud Stream: secrets in logsCVE-2026-59302no fix yetLow 3.1Aug 27VMware Spring Cloud Stream: resource exhaustionCVE-2026-59303no fix yetLow 3.1Aug 27VMware Spring Cloud Stream: type confusionCVE-2026-59304no fix yetLow 3.1Aug 27Partition interceptor may be improperly added while sending messageCVE-2026-59305no fix yetLow 3.1Aug 27VMware Spring Cloud Stream: unsafe deserializationCVE-2026-59306no fix yetHigh 7.4Aug 27VMware Spring for GraphQL: information disclosureCVE-2026-59288no fix yetHigh 7.5Aug 27VMware Spring for GraphQL: denial of serviceCVE-2026-59289no fix yetLow 2.0Aug 27VMware Spring Cloud Function: arbitrary file readCVE-2026-59291no fix yetLow 3.2Aug 27VMware Spring Integration: insecure permissionsCVE-2026-59292no fix yetMedium 6.6Aug 27VMware Spring Integration: tamperingCVE-2026-59293no fix yetMedium 5.9Aug 27VMware Spring AI: path traversalCVE-2026-59294no fix yetLow 3.1Aug 27VMware Spring Cloud Function: origin validation errorCVE-2026-59297no fix yetMedium 6.1Aug 27VMware Spring Framework: code injectionCVE-2026-59281no fix yetHigh 7.5Aug 27VMware Spring Framework: denial of serviceCVE-2026-59282no fix yetCritical 9.1Aug 27Applications that evaluate Spring Expression LanguageCVE-2026-59283no fix yetHigh 7.6Aug 27VMware Spring Cloud Commons: mass assignmentCVE-2026-59284no fix yetHigh 8.1Aug 27VMware Spring for GraphQL: unsafe deserializationCVE-2026-59285no fix yetHigh 8.1Aug 27VMware Spring for GraphQL: code executionCVE-2026-59286no fix yetMedium 5.9Aug 27VMware Spring for GraphQL: denial of serviceCVE-2026-59287no fix yetMedium 5.9Aug 27Several components in Spring Security compare security-sensitive values using...CVE-2026-59276no fix yetLow 3.7Aug 27VMware Spring Security: protection mechanism failureCVE-2026-59277no fix yetMedium 6.8Aug 27Any application shipping logs to RabbitMQ over TLS via the Log4j2 appenderCVE-2026-59272no fix yetMedium 4.3Aug 27VMware Spring Framework: path traversalCVE-2026-59280no fix yetCritical 9.6Aug 27VMware Spring Security: cross-site scriptingCVE-2026-59354no fix yetMedium 6.1Aug 27VMware Spring Authorization Server: open redirectCVE-2026-59355no fix yetMedium 6.6Aug 27VMware Spring AMQP: unsafe deserializationCVE-2026-59275no fix yetMedium 6.5Aug 27VMware Spring for Apache Kafka: server-side request forgeryCVE-2026-59278no fix yetCritical 9.4Aug 27VMware Spring Security: improper authorizationCVE-2026-59270no fix yetMedium 5.3Aug 27VMware Spring AMQP: information disclosure in errorsCVE-2026-59271no fix yetMedium 6.5Aug 27VMware Spring Integration: denial of serviceCVE-2026-59274no fix yetCritical 9.8Aug 27Spring MVC and WebFlux applications are vulnerable to stream corruptionCVE-2026-47890no fix yetCritical 9.8Aug 27VMware Spring Framework: resource exhaustionCVE-2026-47891no fix yetCritical 9.8Aug 27VMware Spring Framework: improper authorizationCVE-2026-47892no fix yetHigh 7.5Aug 27VMware Spring Framework: information disclosure in errorsCVE-2026-47893no fix yetMedium 4.9Aug 27Spring Cloud Config Server native environment repositoryCVE-2026-47894no fix yetHigh 7.5Aug 27VMware Spring Framework: denial of serviceCVE-2026-47886no fix yetMedium 6.1Aug 27VMware Spring Framework: open redirectCVE-2026-47887no fix yetHigh 7.5Aug 27VMware Spring Framework: memory leakCVE-2026-47888no fix yetHigh 7.5Aug 27A WebFlux application running on the Jetty 12 Core reactive adapter serializes...CVE-2026-47889no fix yetMedium 5.9Aug 27VMware Spring Batch: resource exhaustionCVE-2026-47881no fix yetMedium 6.1Aug 27VMware Spring Framework: open redirectCVE-2026-47883no fix yet

The newest 60. Each project page has the full list.

About VMware

VMware LLC is an American cloud computing and virtualization technology company headquartered in Palo Alto, California, U.S. On November 22, 2023, Broadcom acquired VMware in a cash-and-stock transaction valued at $69 billion, with the End-User Computing division of VMware then sold to KKR and rebranded to Omnissa.

Elsewhere on Ibis: Paydays · TechConf