Known vulnerabilities in snipe-it 5.3.4 - page 3

Vendor: snipe
Software: snipe-it
Version: 5.3.4
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 93
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting snipe-it version 5.3.4 snipe-it 5.3.4 is affected by 93 vulnerabilities: 15 medium, 78 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154184 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-116201
CWE-367 Medium
No
No
8.5.0 13.10.2026 SB2026060948
#VU154183 - Unchecked Return Value
CVE-2026-116200
CWE-252 Medium
No
No
8.6.3 13.10.2026 SB20260814125
#VU154180 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-915 Low
No
No
8.6.3 13.10.2026 SB20260814125
#VU154181 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-915 Low
No
No
8.6.3 13.10.2026 SB20260814125
#VU154182 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-915 Low
No
No
8.6.3 13.10.2026 SB20260814125
#VU154179 - Improper Authentication
CVE-2026-116199
CWE-287 Low
No
No
8.6.3 13.10.2026 SB20260814125
#VU145084 - Improper Neutralization of Formula Elements in a CSV File
CVE-2026-86745
CWE-1236 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145083 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-86744
CWE-362 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145082 - Authorization Bypass Through User-Controlled Key
CVE-2026-86743
CWE-639 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145081 - Improper Neutralization of Formula Elements in a CSV File
CVE-2026-86742
CWE-1236 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145080 - External Control of File Name or Path
CVE-2026-86741
CWE-73 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145079 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-86740
CWE-754 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145078 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-86739
CWE-754 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145076 - Missing Authorization
CVE-2026-86737
CWE-862 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145075 - Incorrect Calculation
CVE-2026-86736
CWE-682 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145074 - Server-Side Request Forgery (SSRF)
CVE-2026-86735
CWE-918 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145072 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-86733
CWE-78 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU142578 - Improper Access Control
CVE-2026-85617
CWE-284 Low
No
No
8.6.3 14.08.2026 SB20260814125
#VU142577 - Authorization Bypass Through User-Controlled Key
CVE-2026-55694
CWE-639 Low
No
No
8.6.3 14.08.2026 SB20260814125
#VU142576 - Missing Authorization
CVE-2026-55703
CWE-862 Low
No
No
8.6.3 14.08.2026 SB20260814125


Showing elements 41 - 60 out of 93