Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

jhuckaby vulnerabilities

5 published CVEs name jhuckaby among the affected products.

Newest CVEs

  • CVE-2026-85076

    Cronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401)

    jhuckaby · Cronicle

    Critical9.0
  • CVE-2026-58255

    Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401

    jhuckaby · Cronicle

    High8.8
  • CVE-2026-55562

    Cronicle: Stored XSS in admin Activity Log via account full_name field

    jhuckaby · Cronicle

    Critical9.0
  • CVE-2026-39401

    Privilege Escalation via update_event Job Output in Cronicle

    jhuckaby · Cronicle

    Medium5.3
  • CVE-2026-39400

    Stored XSS via Job HTML/Table Output in Cronicle

    jhuckaby · Cronicle

    Medium5.3