168604 matches found
EUVD-2026-57260
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-68754
A repository publisher without delete permission may modify protected package content under specific conditions...
CVE-2026-68753
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way...
CVE-2026-66381
A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...
CVE-2026-66376
Credentials for a deleted user may remain valid for a short period under specific conditions...
CVE-2026-66378
An authenticated user without repository read permission may access private NuGet metadata under specific conditions...
CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access...
CVE-2026-66377
An unauthenticated user may access restricted repository information under specific conditions...
CVE-2026-68759 Integration credential holders may impersonate users in JFrog Access
A holder of a valid integration credential may impersonate other users under specific conditions...
CVE-2026-68759
A holder of a valid integration credential may impersonate other users under specific conditions...
Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads
Impact Affected versions of Winter CMS did not enforce per-template-type permission checks in the CMS section's AJAX handlers. The CMS controller Cms\Controllers\Index used OR-logic across its five permissions cms.managepages, cms.managepartials, cms.managelayouts, cms.managecontent,...
CVE-2026-68758
Technical details about CVE-2026-68758 are not publicly available in the provided documents; no affected products, versions, root cause, or remediation are specified. Monitor for updates.
EUVD-2026-57255
A low-privileged authenticated user may access restricted support information under specific conditions...
CVE-2026-68758 Authenticated users may access restricted Artifactory support information
A low-privileged authenticated user may access restricted support information under specific conditions...
CVE-2026-66381 Repository readers may access content outside configured upstream paths
A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...
EUVD-2026-57250
A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...
CVE-2026-66379 Authenticated users may view private Puppet module metadata
An authenticated user may view private Puppet module metadata without repository read access...
CVE-2026-66380
CVE-2026-66380 describes a access control bypass where an authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. The public metrics indicate CVSS 3.1 base score 4.3 (Medium), with attack vector NETWORK and privileges required LOW,...