Known vulnerabilities in snipe-it 6.0.0 - page 2

Vendor: snipe
Software: snipe-it
Version: 6.0.0
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 97
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting snipe-it version 6.0.0 snipe-it 6.0.0 is affected by 97 vulnerabilities: 2 high, 16 medium, 79 low Critical High Medium Low

Vulnerabilities (97)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145073 - Resource exhaustion
CVE-2026-86734
CWE-400 Low
No
No
8.7.1 25.08.2026 SB2026082532
#VU142575 - Authorization Bypass Through User-Controlled Key
CVE-2026-85616
CWE-639 Medium
No
No
8.6.2 14.08.2026 SB20260814123
#VU142574 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55481
CWE-79 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142573 - Improper Neutralization of Formula Elements in a CSV File
CVE-2026-55452
CWE-1236 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142572 - Improper Access Control
CVE-2026-55515
CWE-284 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142571 - Missing Authorization
CVE-2026-55516
CWE-862 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-61807
CWE-79 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142569 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-55461
CWE-601 Medium
No
No
8.6.2 14.08.2026 SB20260814123
#VU142568 - Improper Authorization
CVE-2026-55460
CWE-285 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142565 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55466
CWE-79 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142564 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-55469
CWE-22 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142563 - Improper Access Control
CVE-2026-55472
CWE-284 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142559 - Authorization Bypass Through User-Controlled Key
CVE-2026-55478
CWE-639 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142558 - Improper Access Control
CVE-2026-55479
CWE-284 Low
No
No
8.6.2 14.08.2026 SB20260814123
#VU142556 - Improper Access Control
CVE-2026-54329
CWE-284 Medium
No
No
8.6.2 14.08.2026 SB20260814123
#VU85898 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51651
CWE-22 Low
No
No
6.3.0 30.01.2024 SB2024013024
SB2024013025
#VU85894 - Uncontrolled Recursion
CVE-2023-50262
CWE-674 Medium
No
No
6.3.0 30.01.2024 SB2024013023
SB2024013025
#VU81101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3726
CWE-79 Low
No
No
6.2.0 25.09.2023 SB2023092533
SB2023092615
#VU70523 - Exposure of sensitive information to an unauthorized actor
CVE-2022-44381
CWE-200 Low
No
No
6.0.14 28.12.2022 SB2022122812
#VU70522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-44380
CWE-79 Low
No
No
6.0.14 28.12.2022 SB2022122811


Showing elements 21 - 40 out of 97