Products: 2
Vulnerabilities: 13
Known Exploited: 0
2
Critical Level Threats
3
High Level Threats
7
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-110100
Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()
Last Modified: Oct 26, 2026
Published: Oct 13, 2026
CVE-2026-110099
Jorani before 1.0.4 Missing Authorization in HR Export Actions
Last Modified: Oct 13, 2026
Published: Oct 13, 2026
CVE-2026-110098
Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests
Last Modified: Oct 14, 2026
Published: Oct 13, 2026
CVE-2025-67102
A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL commands via the entity parameter.
Last Modified: Apr 03, 2026
Published: Feb 17, 2026
CVE-2023-53870
Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter
Last Modified: Apr 15, 2026
Published: Dec 15, 2025
Items Per Page
