130736 matches found
EUVD-2026-57260
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-66382
An authenticated user may write files outside the intended Artifactory work directory under specific conditions...
CVE-2026-66375
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access...
phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration
Summary An authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logged-in user to bypass the intended display-name search filter and enumerate active users. The endpoint escapes SQL string syntax but does not escape % and , which remain active LIKE...
Cross-site Scripting (XSS)
Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the document.title assignment in JavaScript, where user-supplied GET parameters are...
EUVD-2026-57256
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384
JFrog Artifactory is affected by an improper limitation of a pathname to a restricted directory , allowing an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. The vulnerability carries a CVSS score of 5.3 (MEDIUM) with high integ...
CVE-2026-68758
Technical details about CVE-2026-68758 are not publicly available in the provided documents; no affected products, versions, root cause, or remediation are specified. Monitor for updates.
EUVD-2026-57255
A low-privileged authenticated user may access restricted support information under specific conditions...
CVE-2026-68758 Authenticated users may access restricted Artifactory support information
A low-privileged authenticated user may access restricted support information under specific conditions...
CVE-2026-68758
A low-privileged authenticated user may access restricted support information under specific conditions...
CVE-2026-66375
CVE-2026-66375 concerns JFrog Artifactory metadata : a low-privilege authenticated user can permanently remove protected internal metadata across repositories under specific conditions. The issue is described across multiple sources (NVD, CVE Registry) with related CVSS 3.1 data: AV:N/AC:L/PR:L/U...
CVE-2026-66382 Authenticated users may write files outside the intended Artifactory work directory
An authenticated user may write files outside the intended Artifactory work directory under specific conditions...