Known vulnerabilities in snipe-it 5.3.4

Vendor: snipe
Software: snipe-it
Version: 5.3.4
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 93
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting snipe-it version 5.3.4 snipe-it 5.3.4 is affected by 93 vulnerabilities: 15 medium, 78 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142567 - Improper Access Control
CVE-2026-55462
CWE-284 Low
No
No
8.6.1 14.08.2026 SB20260814124
#VU142562 - Relative Path Traversal
CVE-2026-55474
CWE-23 Low
No
No
8.6.0 14.08.2026 SB2026060947
#VU142561 - Improper Access Control
CVE-2026-55475
CWE-284 Low
No
No
8.6.1 14.08.2026 SB20260814124
#VU142560 - Improper Access Control
CVE-2026-55476
CWE-284 Low
No
No
8.6.1 14.08.2026 SB20260814124
#VU142557 - Improper Privilege Management
CVE-2026-55843
CWE-269 Low
No
No
8.6.0 14.08.2026 SB2026060947
#VU134513 - Improper Access Control
CVE-2026-55542
CWE-284 Low
No
No
8.6.0 15.06.2026 SB2026060947
#VU134512 - Improper Authorization
CVE-2026-55519
CWE-285 Low
No
No
8.4.1 15.06.2026 SB2026051174
#VU134015 - Improper Restriction of Excessive Authentication Attempts
CVE-2026-49870
CWE-307 Low
No
No
8.6.0 09.06.2026 SB2026060947
#VU134014 - Improper Access Control
CVE-2026-49976
CWE-284 Low
No
No
8.6.0 09.06.2026 SB2026060947
#VU134013 - Improper Access Control
CVE-2026-48492
CWE-284 Low
No
No
8.6.0 09.06.2026 SB2026060947
#VU134012 - Improper Access Control
CVE-2026-48493
CWE-284 Low
No
No
8.6.0 09.06.2026 SB2026060947
#VU134011 - Improper Access Control
CVE-2026-48507
CWE-284 Low
No
No
8.6.0 09.06.2026 SB2026060947
#VU130988 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-44831
CWE-79 Low
No
No
8.4.1 11.05.2026 SB2026051174
#VU130987 - Improper Access Control
CVE-2026-44832
CWE-284 Medium
No
No
8.4.1 11.05.2026 SB2026051174
#VU130986 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-44833
CWE-601 Low
No
No
8.4.1 11.05.2026 SB2026051174
#VU130985 - Improper Access Control
CVE-2026-37709
CWE-284 Low
No
No
8.4.1 11.05.2026 SB2026051174
#VU62071 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1291
CWE-79 Low
No
No
5.4.2 11.04.2022 SB2022041129
SB2022041130
#VU60880 - Information Exposure Through an Error Message
CVE-2022-0622
CWE-209 Medium
No
No
5.4.0 25.02.2022 SB2022022517
#VU60575 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
5.3.10 14.02.2022 SB2022021406
#VU59061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4108
CWE-79 Low
No
No
5.3.5 20.12.2021 SB2021122017


Showing elements 1 - 20 out of 93