Known Vulnerabilities for Timesheet.php by Dominic Gamble
Listed below are 1 of the newest known vulnerabilities associated with "Timesheet.php" by "Dominic Gamble".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109376 json | ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the get_timesheet_html method that lets ... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-100899 json | A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function where... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-100898 json | A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-94113 json | Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whiteliste... | Not Provided | 2026-09-20 | 2026-09-21 |
| CVE-2026-84808 json | Kimai versions before 2.65.0 contain an authorization bypass vulnerability in the REST API timesheet collection endpoint that... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-80202 json | Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), which maps permissions only... | Not Provided | 2026-08-26 | 2026-10-08 |
| CVE-2026-80197 json | Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and remove endpoints that ... | Not Provided | 2026-08-26 | 2026-10-08 |
| CVE-2026-80193 json | Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new timesh... | Not Provided | 2026-08-26 | 2026-08-28 |
| CVE-2026-52823 json | Kimai is an open-source time tracking application. Prior to 2.58.0, TimesheetController exposes GET /api/timesheets/{id}/stop... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-52822 json | Kimai is an open-source time tracking application. Prior to 2.58.0, PATCH /api/timesheets/{id}/restart, PATCH /api/timesheets... | Not Provided | 2026-09-15 | 2026-09-15 |