← All credits

VulDB CNA Team

2742 vulnerability records and advisories credit this contributor.

CVE-2026-124588

huggingface finetrainers Model Index model.py resolve_component_cls code injection

CVE-2026-124584

wummel patool Gzip Extraction fileutil.py extract_gzip symlink

CVE-2026-124579

aaPanel BillionMail Relay Configuration API relay.go injection

CVE-2026-124567

fushengqian fuint ClientOrderController.java receipt state issue

CVE-2026-124558

DataLinkDC Dinky sql-gateway Endpoint SqlGateway.java SqlGateway.onOpen server-side request forgery

CVE-2026-124554

JeecgBoot JimuBI getAllChartData sql injection

CVE-2026-124506

Dianping CAT Report hourlyReport.tag Model.getDomain cross site scripting

CVE-2026-124501

Tidelift moto AWS Batch Emulation models.py privileges management

CVE-2026-124331

Jinher OA ProjectAfficheManage.aspx sql injection

CVE-2026-124326

DataLinkDC Dinky Catalogue Upload CatalogueController.java file.getOriginalFilename path traversal