Filtered by vendor Snipeitapp
Subscriptions
Total
32 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-0622 | 1 Snipeitapp | 1 Snipe-it | 2022-02-25 | 5.3 Medium |
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11. | ||||
CVE-2021-4130 | 1 Snipeitapp | 1 Snipe-it | 2021-12-21 | 8.8 High |
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF) | ||||
CVE-2021-4108 | 1 Snipeitapp | 1 Snipe-it | 2021-12-21 | 6.1 Medium |
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||||
CVE-2021-4075 | 1 Snipeitapp | 1 Snipe-it | 2021-12-07 | 7.2 High |
snipe-it is vulnerable to Server-Side Request Forgery (SSRF) | ||||
CVE-2021-4018 | 1 Snipeitapp | 1 Snipe-it | 2021-12-02 | 5.4 Medium |
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||||
CVE-2021-3961 | 1 Snipeitapp | 1 Snipe-it | 2021-11-23 | 5.4 Medium |
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||||
CVE-2021-3938 | 1 Snipeitapp | 1 Snipe-it | 2021-11-16 | 5.4 Medium |
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||||
CVE-2021-3931 | 1 Snipeitapp | 1 Snipe-it | 2021-11-16 | 4.3 Medium |
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF) | ||||
CVE-2021-3863 | 1 Snipeitapp | 1 Snipe-it | 2021-10-21 | 6.1 Medium |
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||||
CVE-2021-3879 | 1 Snipeitapp | 1 Snipe-it | 2021-10-21 | 5.4 Medium |
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||||
CVE-2021-3858 | 1 Snipeitapp | 1 Snipe-it | 2021-10-20 | 8.8 High |
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF) | ||||
CVE-2019-10118 | 1 Snipeitapp | 1 Snipe-it | 2019-03-27 | N/A |
Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API. |