CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| GHSA-f679-254h-qhvj |
| BAIXO |
Leantime allows Cross-Site Scripting (XSS) |
| 21/02/2025 |
| GHSA-3hfj-qcvj-4hx8 | BAIXO | Leantime has Missing Authorization Check for Host Parameter | 21/02/2025 |
| GHSA-c39w-3pjx-qc7m | ALTO | Leantime allows Stored Cross-Site Scripting (XSS) | 21/02/2025 |
| GHSA-92xh-6x7v-4rmq | MÉDIO | Leantime allows Cross-Site Request Forgery (CSRF) | 21/02/2025 |
| GHSA-v4q9-437p-mhpg | ALTO | Leantime allows Cross Site Scripting (XSS) and SQL Injection (SQLi) | 21/02/2025 |
| GHSA-63cr-xg3f-8jvr | MÉDIO | Leantime allows Stored Cross-Site Scripting (XSS) | 21/02/2025 |
| GHSA-52xf-h226-pfgx | MÉDIO | Leantime allows Refelected Cross-Site Scripting (XSS) | 21/02/2025 |
| GHSA-h6w8-27ph-c385 | MÉDIO | Leantime has Insufficiently Protected Credentials | 21/02/2025 |
| GHSA-mg4c-884j-pcq9 | MÉDIO | Leantime allows Stored Cross-Site Scripting (XSS) | 21/02/2025 |
| GHSA-99r5-84gr-59f6 | MÉDIO6.5 | Leantime has Host Header Injection Vulnerability | 21/02/2025 |