Overview 45 matches · 14 in Waratek scope · 1 protected · 2 exploited · 2 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
45matches
14in Waratek scope31.1%
1protected2.2%
2exploited4.4%
2CISA KEV4.4%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
1
2.2%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
13
28.9%
Outside Waratek scope
1
2.2%
Not applicable
30
66.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
2.2%
partly blocked
0
0.0%
not blocked
44
97.8%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
2
4.4%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
43
95.6%
split by
peak 14 / year
20001
Not applicable1
Low1
not blocked1
No public exploit1
20011
Not applicable1
Low1
not blocked1
No public exploit1
20020
20031
Not applicable1
Low1
not blocked1
No public exploit1
20040
20051
Not applicable1
Low1
not blocked1
No public exploit1
20061
Not applicable1
Low1
not blocked1
No public exploit1
20073
Not applicable3
Low3
not blocked3
No public exploit3
20082
Not applicable2
Low2
not blocked2
No public exploit2
20091
Not applicable1
Low1
not blocked1
No public exploit1
20101
Not applicable1
Low1
not blocked1
No public exploit1
20114
Not applicable4
Low4
not blocked4
No public exploit4
20121
Outside Waratek scope1
Low1
not blocked1
No public exploit1
20130
20141
Not applicable1
Low1
not blocked1
No public exploit1
20152
Not applicable2
Low2
not blocked2
No public exploit2
20160
20171
Not applicable1
Low1
not blocked1
No public exploit1
20180
20190
20206
Not applicable6
Low6
not blocked6
No public exploit6
20211
Not applicable1
Low1
not blocked1
No public exploit1
20222
No exploit published1
Not applicable1
Low2
not blocked2
No public exploit2
20231
Not applicable1
Low1
not blocked1
Exploited1
20240
20250
202614
Protected by Waratek1
No exploit published12
Not applicable1
Low14
blocked by ARMR today1
not blocked13
Exploited1
No public exploit13
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-59314 | Low | 2026-08-27 | No exploit published | No public exploit | Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier |
| CVE-2026-59306 | Low | 2026-08-27 | Protected by Waratek | No public exploit | Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59305 | Low | 2026-08-27 | No exploit published | No public exploit | Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59304 | Low | 2026-08-27 | No exploit published | No public exploit | Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59303 | Low | 2026-08-27 | No exploit published | No public exploit | Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59300 | Low | 2026-08-27 | No exploit published | No public exploit | Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier |
| CVE-2026-59299 | Low | 2026-08-27 | No exploit published | No public exploit | Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier |
| CVE-2026-59298 | Low | 2026-08-27 | No exploit published | No public exploit | Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier |
| CVE-2026-59297 | Low | 2026-08-27 | No exploit published | No public exploit | Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 |
| CVE-2026-59292 | Low | 2026-08-27 | No exploit published | No public exploit | PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier |
| CVE-2026-41709 | Low | 2026-07-30 | Not applicable | Exploited | VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged. |
| CVE-2026-22741 | Low | 2026-04-29 | No exploit published | No public exploit | Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the application is using Spring MVC or Spring WebFlux * the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled * the application adds support for encoded resources resolution * the resource cache must be empty when the attacker has access to the application When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients. |
| CVE-2026-22746 | Low | 2026-04-22 | No exploit published | No public exploit | Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user attributes, to enable, expire, or lock users, then DaoAuthenticationProvider's timing attack defense can be bypassed for users who are disabled, expired, or locked.This issue affects Spring Security: from 5.7.0 through 5.7.22, from 5.8.0 through 5.8.24, from 6.3.0 through 6.3.15, from 6.5.0 through 6.5.9, from 7.0.0 through 7.0.4. |
| CVE-2026-22735 | Low | 2026-03-20 | No exploit published | No public exploit | Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE). This issue affects Spring Foundation: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46. |
| CVE-2023-20867 | Low | 2023-06-13 | Not applicable | Exploited | A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. |
| CVE-2022-31699 | Low | 2022-12-13 | Not applicable | No public exploit | VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure. |
| CVE-2022-31679 | Low | 2022-09-21 | No exploit published | No public exploit | Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes. |
| CVE-2021-22033 | Low | 2021-10-13 | Not applicable | No public exploit | Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability. |
| CVE-2020-4008 | Low | 2020-12-16 | Not applicable | No public exploit | The installer of the macOS Sensor for VMware Carbon Black Cloud (prior to 3.5.1) handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor installation. |
| CVE-2020-3989 | Low | 2020-09-16 | Not applicable | No public exploit | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial denial-of-service condition on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client. |
| CVE-2020-3970 | Low | 2020-06-25 | Not applicable | No public exploit | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process leading to a partial denial of service condition. |
| CVE-2020-3972 | Low | 2020-06-19 | Not applicable | No public exploit | VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation. Successful exploitation of this issue may allow attackers with non-admin privileges on guest macOS virtual machines to create a denial-of-service condition on their own VMs. |
| CVE-2020-3959 | Low | 2020-05-29 | Not applicable | No public exploit | VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability in the VMCI module. A malicious actor with local non-administrative access to a virtual machine may be able to crash the virtual machine's vmx process leading to a partial denial of service. |
| CVE-2020-3951 | Low | 2020-03-17 | Not applicable | No public exploit | VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attackers with non-administrative access to a guest VM with virtual printing enabled may exploit this issue to create a denial-of-service condition of the Thinprint service running on the system where Workstation or Horizon Client is installed. |
| CVE-2017-4896 | Low | 2017-05-10 | Not applicable | No public exploit | Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data. |
| CVE-2015-1044 | Low | 2015-01-29 | Not applicable | No public exploit | vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors. |
| CVE-2015-1043 | Low | 2015-01-29 | Not applicable | No public exploit | The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors. |
| CVE-2014-1208 | Low | 2014-01-17 | Not applicable | No public exploit | VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service (VMX process disruption) by using an invalid port. |
| CVE-2009-2899 | Low | 2012-12-05 | Outside Waratek scope | No public exploit | The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments. |
| CVE-2011-2146 | Low | 2011-06-06 | Not applicable | No public exploit | mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and directories via unspecified vectors. |
| CVE-2011-1788 | Low | 2011-05-09 | Not applicable | No public exploit | vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors. |
| CVE-2011-1681 | Low | 2011-04-10 | Not applicable | No public exploit | vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. |
| CVE-2010-2928 | Low | 2011-02-16 | Not applicable | No public exploit | The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file. |
| CVE-2010-3277 | Low | 2010-09-28 | Not applicable | No public exploit | The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file. |
| CVE-2009-0518 | Low | 2009-04-06 | Not applicable | No public exploit | VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password. |
| CVE-2008-4278 | Low | 2008-10-06 | Not applicable | No public exploit | VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password. |
| CVE-2008-2101 | Low | 2008-09-03 | Not applicable | No public exploit | The VMware Consolidated Backup (VCB) command-line utilities in VMware ESX 3.0.1 through 3.0.3 and ESX 3.5 place a password on the command line, which allows local users to obtain sensitive information by listing the process. |
| CVE-2007-5438 | Low | 2007-10-13 | Not applicable | No public exploit | Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function. |
| CVE-2007-0833 | Low | 2007-02-07 | Not applicable | No public exploit | VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, preserves clipboard data on the guest operating system after it was deleted on the host operating system, which might allow local users to read clipboard contents by moving the focus back to the host operating system. |
| CVE-2007-0832 | Low | 2007-02-07 | Not applicable | No public exploit | VMware Workstation 5.5.3 34685 does not immediately change the availability of a shared clipboard when the "Enable copy and paste to and from this virtual machine" checkbox is changed, which allows local users to obtain sensitive information or conduct certain attacks that are facilitated by weaker isolation between the host and guest operating systems. |
| CVE-2006-3589 | Low | 2006-07-21 | Not applicable | No public exploit | vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key. |
| CVE-2005-3620 | Low | 2005-12-31 | Not applicable | No public exploit | The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges. |
| CVE-2003-0480 | Low | 2003-08-07 | Not applicable | No public exploit | VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." |
| CVE-2001-1059 | Low | 2001-07-30 | Not applicable | No public exploit | VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information. |
| CVE-2000-0090 | Low | 2000-01-17 | Not applicable | No public exploit | VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. |