CVE Tools
Track your stack

Anuko

9 CVEs tracked since 2020. Since Nov 2020, none of them reached CISA KEV.

Anuko CVEs per month

Nov 2020 to May 2023. Point at a month, or focus the strip and use the arrow keys.
Anuko CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-1120
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-1020
2021-11null or fewer
2021-12null or fewer
2022-01null or fewer
2022-0220
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-0530

Products

The products that kept showing up in Anuko's monthly top three, with their CVEs summed over those months.

  1. Time Tracker84 months
  2. Timetracker73 months
  3. Anuko Time Tracker11 month

Latest CVEs

The 13 most recently published vulnerabilities affecting Anuko.

  1. CVE-2023-32308SQL Injection Vulnerability in anuko timetracker8.2
  2. CVE-2023-32306Time Tracker has Blind SQL Injection Vulnerability in Reports8.8
  3. CVE-2023-32066Time Tracker has Stored XSS vulnerability in Week View plugin5.4
  4. CVE-2022-24707SQL injection in anuko timetracker7.4
  5. CVE-2022-24708Stored XSS vulnerability in anuko/timetracker6.5
  6. CVE-2021-43851SQL injection vulnerability in anuko timetracker8.1
  7. CVE-2021-41156Reflected XSS vulnerability6.8
  8. CVE-2021-41139Reflected XSS vulnerability in time.php8.1
  9. CVE-2021-29436Cross site request forgery vulnerability5.4
  10. CVE-2021-21352Predictable tokens used for password resets6.8
  11. CVE-2020-27422In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeover the account.9.8
  12. CVE-2020-27423Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox7.5
  13. CVE-2020-15255CSV injection in Anuko Time Tracker8.7

The record

Peak rank
#132 in Nov 2020
Busiest month shown
May 2023, 3 CVEs
Months with a KEV entry
0 since Nov 2020
Monthly snapshots
4 since 2020
Anuko's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store