CVE Browser

Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)

Spring Cloud Commons no allow list for writable env actuator endpoint

Spring Authorization Server: Open Redirect via request_uri parameter

Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File

Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist

JobParameterDeserializer bypasses the trusted-type allowlist

Reactor Core bufferTimeout fair-backpressure pipeline permanently hangs when upstream delivers items during an active flush

Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around

Reactor Netty HTTP Server may incorrectly evaluate proxy addresses

Reactor Netty WebSocket Client Leaks Credentials On Redirect

Reactor Netty HTTP Server Leaks Exception Details

Reactor Netty may incorrectly route traffic due to DNS resolver reuse

HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server

live information startup mode is vulnerable for remote code execution

VMware Avi Load Balancer Directory Traversal Vulnerability

VMware Avi Load Balancer Privilege Escalation Vulnerability

VMware Avi Load Balancer Remote Code Execution Vulnerability

VMware Avi Load Balancer Local Privilege Escalation Vulnerability

VMware Avi Load Balancer Remote Code Execution Vulnerability

VMware Avi Load Balancer Authorization Bypass Vulnerability

VMware Avi Load Balancer Authentication Bypass Vulnerability

Local privilege escalation in Symantec ITMS

Arbitrary File Read as SYSTEM in Symantec ITMS

Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass