snipe/snipe-it

57 results · Clear filters · Feed

• Medium 4.8
  CVE-2022-32060 Public exploit

  Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings

  An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.

  snipe/snipe-it Packagist
  Jul 7, 2022
• Medium 6.5
  CVE-2022-1511

  Missing Authorization in snipe/snipe-it

  Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4.

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Apr 28, 2022
• Medium 5.3
  CVE-2022-0622

  Generation of Error Message Containing Sensitive Information in snipe/snipe-it

  Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Feb 17, 2022
• Medium 6.3
  CVE-2022-0611

  Missing Authorization in snipe/snipe-it

  Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Feb 15, 2022
• Medium 6.5
  CVE-2022-0579

  Missing Authorization in snipe/snipe-it

  Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Feb 14, 2022
• Medium 5.3
  CVE-2022-0569

  Observable Discrepancy in snipe/snipe-it

  Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Feb 12, 2022
• Medium 6.3
  CVE-2022-0178

  Missing Authorization in snipe/snipe-it

  Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8.

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Jan 13, 2022
• Medium 6.3
  CVE-2022-0179

  Missing Authorization in snipe/snipe-it

  snipe-it is vulnerable to Missing Authorization

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Jan 12, 2022
• Medium 4.3
  CVE-2021-4130

  Cross-Site Request Forgery (CSRF) in snipe/snipe-it

  snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Dec 18, 2021
• Medium 6.4
  CVE-2021-4108

  Cross-site Scripting (XSS) - Stored in snipe/snipe-it

  snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Dec 14, 2021
• Medium 4.3
  CVE-2021-4089

  Improper Access Control in snipe/snipe-it

  snipe-it is vulnerable to Improper Access Control

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Dec 10, 2021
• Medium 6.3
  CVE-2021-4018

  Cross-site Scripting (XSS) - Stored in snipe/snipe-it

  snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Dec 1, 2021
• Medium 4.3
  CVE-2021-3931

  Cross-Site Request Forgery (CSRF) in snipe/snipe-it

  snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Nov 13, 2021
• Medium 6.8
  CVE-2021-3879

  Cross-site Scripting (XSS) - Stored in snipe/snipe-it

  snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Oct 19, 2021
• Medium 5.5
  CVE-2021-3863

  Cross-site Scripting (XSS) - Generic in snipe/snipe-it

  snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Oct 19, 2021
• Medium 4.3
  CVE-2021-3858

  Cross-Site Request Forgery (CSRF) in snipe/snipe-it

  snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Oct 19, 2021
• Medium 6.1
  CVE-2019-10118

  Snipe-IT XSS Vulnerability

  Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.

  snipe/snipe-it Packagist
  Mar 27, 2019