20606 matches found
CVE-2026-69106
The CVE-2026-69106 entry concerns JFrog Artifactory (self-managed releases). A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content. The NVD/CVE records confirm this as a high-severity issue (CVSS v3.1 base ...
CVE-2026-73297
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, isblockedip in ufo/utils/urlsecurity.py did not block NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, the 6to4 prefix 2002::/16, or the Teredo prefix 2001::/32 and did not re-check embedde...
EUVD-2026-57325
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, isblockedip in ufo/utils/urlsecurity.py did not block NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, the 6to4 prefix 2002::/16, or the Teredo prefix 2001::/32 and did not re-check embedde...
CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions...
Server-side Request Forgery (SSRF)
Overview compliance-trestle is a Tools to manage & autogenerate python objects representing the OSCAL layers/models Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the validateurl function in trestle/core/remote/security.py via IPv4-mapped IPv6 addresses an...
CVE-2026-73288
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/objectlock/objectlocksys.rs lets checkobjectlockfordeletion, deleteprefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable .metadata.bin...
CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-70547
Technical details about CVE-2026-70547 are not publicly available in the provided documents. Monitor for updates from official advisories before drawing conclusions on impact, affected products, or remediation.
EUVD-2026-57260
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-70547 Potential unauthorized metadata exposure in JFrog Artifactory
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-70547 Potential unauthorized metadata exposure in JFrog Artifactory
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access...
CVE-2026-66380
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...
CVE-2026-66378
An authenticated user without repository read permission may access private NuGet metadata under specific conditions...
CVE-2026-66375
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access...
UBUNTU-CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access...
CVE-2026-49262
In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route cmsproxy is vulnerable to a Server-Side Request Forgery SSRF attack via DNS Rebinding. A Time-of-Check to Time-of-Use TOCTOU race condition exists between the URL validation phase and the actua...