4 matches found
CVE-2026-31215
The nexent v1.7.5.2 backend service is vulnerable to an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface . The DELETE /{index_name}/documents endpoint fails to implement proper authentication and authorization controls and does not validate the user-suppli...
CVE-2021-41190
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Image Specification, the manifest and index documents were not self-describing and documents with a single digest could be interpreted as either a manifest or an index. ...
CVE-2007-0806
Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for adminews/indexfr.php3, and possibly the adminews index documents for other localizations...
CVE-2007-0806
Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for adminews/indexfr.php3, and possibly the adminews index documents for other localizations...