dbcve.org
Vulnerability index

Browse CVEs

57 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Snipe It MEDIUM 6.6
CVE-2024-48987

Snipe-IT before 7.0.10 allows remote code execution (associated with cookie serialization) when an attacker knows the APP_KEY. This is exacerbated by…

Fix: 7.0.10+
Fix from $1,600 2024-10-11
Snipe It HIGH 8.1
CVE-2024-5685

Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes to the group's memberships vi…

Fix: 6.4.2+
Fix from $1,950 2024-06-14
Snipe It HIGH 8.8
CVE-2023-5511

Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.

Fix: 6.2.3+
Fix from $1,950 2023-10-11
Snipe It MEDIUM 5.4
CVE-2023-5452

Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.2.2.

Fix: 6.2.2+
Fix from $1,600 2023-10-06
Snipe It MEDIUM 5.3
CVE-2022-44381

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request.

Fix: after 6.0.14
Fix from $1,600 2022-12-25
Snipe It MEDIUM 5.4
CVE-2022-44380

Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting (XSS) for View Assigned Assets.

Fix: 6.0.14+
Fix from $1,600 2022-12-25
Snipe It HIGH 8.0
CVE-2022-2997

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.

Fix: 6.0.10+
Fix from $1,950 2022-08-25
Snipe It HIGH 8.8
CVE-2022-23064

In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password …

Fix: after 5.3.7
Fix from $1,950 2022-05-02
Snipe It MEDIUM 6.5
CVE-2022-1511

Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4.

Fix: 5.4.4+
Fix from $1,600 2022-04-28
Snipe It MEDIUM 5.4
CVE-2022-1445

Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is ca…

Fix: 5.4.3+
Fix from $1,600 2022-04-24
Snipe It MEDIUM 5.4
CVE-2022-1380

Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of…

Fix: 5.4.3+
Fix from $1,600 2022-04-16
Snipe It HIGH 7.4
CVE-2022-1155

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.

Fix: 5.3.10+
Fix from $1,950 2022-03-30
Snipe It MEDIUM 5.3
CVE-2022-0622

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.

Fix: after 5.3.10
Fix from $1,600 2022-02-17
Snipe It HIGH 8.8
CVE-2022-0611

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.

Fix: 5.3.11+
Fix from $1,950 2022-02-16
Snipe It MEDIUM 6.5
CVE-2022-0579

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.

Fix: 5.3.9+
Fix from $1,600 2022-02-14
Snipe It MEDIUM 5.4
CVE-2022-0178

Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8.

Fix: 5.3.8+
Fix from $1,600 2022-01-13
Snipe It MEDIUM 5.4
CVE-2022-0179

snipe-it is vulnerable to Missing Authorization

Fix: 5.3.7+
Fix from $1,600 2022-01-12
Snipe It HIGH 8.8
CVE-2021-4130

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

Fix: 5.3.6+
Fix from $1,950 2021-12-18
Snipe It MEDIUM 6.1
CVE-2021-4108

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 5.3.5+
Fix from $1,600 2021-12-14
Snipe It HIGH 7.2
CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery (SSRF)

Patch available
Fix from $1,950 2021-12-06
Snipe It MEDIUM 5.4
CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 5.3.3+
Fix from $1,600 2021-12-01
Snipe It MEDIUM 5.4
CVE-2021-3961

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 5.3.2+
Fix from $1,600 2021-11-19
Snipe It MEDIUM 5.4
CVE-2021-3938

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: after 5.3.1
Fix from $1,600 2021-11-13
Snipe It HIGH 8.8
CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

Fix: 5.3.0+
Fix from $1,950 2021-10-19
Snipe It MEDIUM 6.1
CVE-2021-3863

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 5.3.0+
Fix from $1,600 2021-10-19
Snipe It MEDIUM 5.4
CVE-2021-3879

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 5.3.0+
Fix from $1,600 2021-10-19
Snipe It MEDIUM 6.1
CVE-2019-10118

Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.

Fix: 4.6.14+
Fix from $1,600 2019-03-27