Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 33
Reset filtersKimai 2 vulnerable to persistent cross-site scripting in the timesheet descriptions
Kimai has an Authenticated Server-Side Template Injection (SSTI)
Kimai contains a SameSite cookie vulnerability
Kimai has an XXE Leading to Local File Read
Kimai information disclosure vulnerability
Kimai API returns timesheet entries a user should not be authorized to view
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Cross-site Scripting in kimai/kimai
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.