24389 matches found
CVE-2026-5736
creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwpk4ryzd22...
GHSA-JR5X-HGM4-RRM6
creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:07+00:00| seen| Telegram/G7jwG369FM-EA8JMh95pmFocIEiy10HcnXiWAHgS3Vj404...
GHSA-2RQ7-JQM7-W8X4
creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:07+00:00| seen| Telegram/G7jwG369FM-EA8JMh95pmFocIEiy10HcnXiWAHgS3Vj404...
CVE-2026-5762
creationtimestamp| type| source ---|---|--- 2026-04-07 21:17:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwpb5sz6v2o...
CVE-2026-39401
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an updateevent key in their JSON output. The server applies this directly to the parent event's stored configuration without any authorization check. A low-privile...
CVE-2026-39347
creationtimestamp| type| source ---|---|--- 2026-04-07 21:12:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwoy7caxq2g...
CVE-2026-22711
creationtimestamp| type| source ---|---|--- 2026-04-07 20:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwnvl64gk25...
CVE-2026-39401
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an updateevent key in their JSON output. The server applies this directly to the parent event's stored configuration without any authorization check. A low-privile...
CVE-2026-39401 Privilege Escalation via update_event Job Output in Cronicle
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an updateevent key in their JSON output. The server applies this directly to the parent event's stored configuration without any authorization check. A low-privile...
CVE-2026-39401
Cronicle prior to 0.9.111 is affected by CVE-2026-39401. The vulnerability arises when jb child processes can include an update_event key in their JSON output, which the server applies directly to the parent event’s stored configuration without authorization. A low-privilege user who can create a...
CVE-2026-39401 Privilege Escalation via update_event Job Output in Cronicle
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an updateevent key in their JSON output. The server applies this directly to the parent event's stored configuration without any authorization check. A low-privile...
EUVD-2026-19925
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an updateevent key in their JSON output. The server applies this directly to the parent event's stored configuration without any authorization check. A low-privile...
CVE-2026-39401 Privilege Escalation via update_event Job Output in Cronicle
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an updateevent key in their JSON output. The server applies this directly to the parent event's stored configuration without any authorization check. A low-privile...
CVE-2026-39400 Stored XSS via Job HTML/Table Output in Cronicle
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, a non-admin user with createevents and runevents privileges can inject arbitrary JavaScript through job output fields html.content, html.title, table.header, table.rows, table.caption. The serve...
GHSA-RX8C-J7X8-W3HJ
creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:57+00:00| seen| Telegram/R04Jnimv0i8bRzdrQmyXdIyX4oD8CszgjzD3ZP34LCmicTY...
GHSA-7FR4-MVFM-CXFX
creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:49+00:00| seen| Telegram/KxTaYuDzH0Z1i49WRh0FHus2MwhOECzgEb0vJJCyVaWiEf0...
CVE-2026-39343
creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:49+00:00| seen| Telegram/KxTaYuDzH0Z1i49WRh0FHus2MwhOECzgEb0vJJCyVaWiEf0 2026-04-13 00:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjdl3qnmlq22...
GHSA-XQ86-JH52-728G
creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:33+00:00| seen| Telegram/MwNatB1kDaoxbSrZihFWwC12FE1HreAtxbr2hmQcZTjcFY...