Vulnerabilities (CVE)

Filtered by vendor Snipeitapp Subscribe
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1511 1 Snipeitapp 1 Snipe-it 2024-11-21 4.0 MEDIUM 6.5 MEDIUM
Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4.
CVE-2022-1445 1 Snipeitapp 1 Snipe-it 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.
CVE-2022-1380 1 Snipeitapp 1 Snipe-it 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie.
CVE-2022-1155 1 Snipeitapp 1 Snipe-it 2024-11-21 6.5 MEDIUM 7.4 HIGH
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.
CVE-2022-0622 1 Snipeitapp 1 Snipe-it 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.
CVE-2022-0611 1 Snipeitapp 1 Snipe-it 2024-11-21 6.5 MEDIUM 6.3 MEDIUM
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.
CVE-2022-0579 1 Snipeitapp 1 Snipe-it 2024-11-21 4.0 MEDIUM 6.5 MEDIUM
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.
CVE-2022-0569 1 Snipeitapp 1 Snipe-it 2024-11-21 4.3 MEDIUM 5.3 MEDIUM
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.
CVE-2022-0179 1 Snipeitapp 1 Snipe-it 2024-11-21 4.9 MEDIUM 5.4 MEDIUM
snipe-it is vulnerable to Missing Authorization
CVE-2022-0178 1 Snipeitapp 1 Snipe-it 2024-11-21 5.5 MEDIUM 6.3 MEDIUM
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8.
CVE-2021-4130 1 Snipeitapp 1 Snipe-it 2024-11-21 6.8 MEDIUM 8.8 HIGH
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4108 1 Snipeitapp 1 Snipe-it 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4089 1 Snipeitapp 1 Snipe-it 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
snipe-it is vulnerable to Improper Access Control
CVE-2021-4075 1 Snipeitapp 1 Snipe-it 2024-11-21 6.5 MEDIUM 7.2 HIGH
snipe-it is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2021-4018 1 Snipeitapp 1 Snipe-it 2024-11-21 3.5 LOW 5.4 MEDIUM
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3961 1 Snipeitapp 1 Snipe-it 2024-11-21 3.5 LOW 5.4 MEDIUM
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3938 1 Snipeitapp 1 Snipe-it 2024-11-21 3.5 LOW 5.4 MEDIUM
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3931 1 Snipeitapp 1 Snipe-it 2024-11-21 4.3 MEDIUM 4.3 MEDIUM
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-3879 1 Snipeitapp 1 Snipe-it 2024-11-21 3.5 LOW 5.4 MEDIUM
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3863 1 Snipeitapp 1 Snipe-it 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')