Vulnerabilities in anuko

11 results

Vexday analysis

Anuko apresenta 11 vulnerabilidades registradas, predominantemente cross-site scripting (CWE-79), sem casos sob ataque ativo ou críticos no momento. O portfólio de risco está consolidado, com nenhuma divulgação recente nos últimos 90 dias, sugerindo um cenário de vulnerabilidades legadas que demandam correção mas não representam ameaça imediata de exploração em massa.

CVE-2022-24707HIGHSQL injection in anuko timetrackerEPSS 7.2%CVE-2020-15255HIGHCSV injection in Anuko Time TrackerEPSS 3.5%CVE-2021-21352MEDIUMPredictable tokens used for password resetsEPSS 1.4%CVE-2021-43851HIGHSQL injection vulnerability in anuko timetrackerEPSS 1.2%CVE-2021-41139HIGHReflected XSS vulnerability in time.phpEPSS 1.0%CVE-2023-32306HIGHTime Tracker has Blind SQL Injection Vulnerability in ReportsEPSS 0.7%CVE-2023-32308HIGHSQL Injection Vulnerability in anuko timetrackerEPSS 0.7%CVE-2022-24708MEDIUMStored XSS vulnerability in anuko/timetrackerEPSS 0.6%CVE-2021-29436MEDIUMCross site request forgery vulnerabilityEPSS 0.5%CVE-2021-41156MEDIUMReflected XSS vulnerabilityEPSS 0.5%CVE-2023-32066MEDIUMTime Tracker has Stored XSS vulnerability in Week View pluginEPSS 0.4%