21206 matches found
CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-66375
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
CVE-2026-66378
An authenticated user without repository read permission may access private NuGet metadata under specific conditions...
CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access...
CVE-2026-66380
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...
CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access...
UBUNTU-CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access...
CVE-2026-49262
In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route cmsproxy is vulnerable to a Server-Side Request Forgery SSRF attack via DNS Rebinding. A Time-of-Check to Time-of-Use TOCTOU race condition exists between the URL validation phase and the actua...
CVE-2026-66375
CVE-2026-66375 concerns JFrog Artifactory metadata : a low-privilege authenticated user can permanently remove protected internal metadata across repositories under specific conditions. The issue is described across multiple sources (NVD, CVE Registry) with related CVSS 3.1 data: AV:N/AC:L/PR:L/U...
CVE-2026-66375 Low-privilege users may remove protected Artifactory metadata
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
CVE-2026-66375 Low-privilege users may remove protected Artifactory metadata
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
EUVD-2026-57254
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
CVE-2026-66379
CVE-2026-66379 describes an issue where an authenticated user can view private Puppet module metadata without repository read access. The provided documents do not specify affected product/version or the exact root cause. The NVD entry lists CVSS v3.1 base score 4.3 (Medium) with confidentiality ...
EUVD-2026-57247
An authenticated user without repository read permission may access private NuGet metadata under specific conditions...
CVE-2026-66378 Authenticated users may access private NuGet metadata
An authenticated user without repository read permission may access private NuGet metadata under specific conditions...
CVE-2026-66378 Authenticated users may access private NuGet metadata
An authenticated user without repository read permission may access private NuGet metadata under specific conditions...
CVE-2026-66380 Authenticated users may access private OCI referrer metadata
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...
CVE-2026-66380
CVE-2026-66380 describes a access control bypass where an authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. The public metrics indicate CVSS 3.1 base score 4.3 (Medium), with attack vector NETWORK and privileges required LOW,...