Known vulnerabilities in snipe-it - page 2

Vendor: snipe
Software: snipe-it
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 121
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting snipe-it snipe-it is affected by 121 known vulnerabilities: 2 high, 27 medium, 91 low Critical High Medium Low

Vulnerabilities (121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85898 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51651
CWE-22 Low
No
No
6.3.0 30.01.2024 SB2024013024
SB2024013025
#VU85894 - Uncontrolled Recursion
CVE-2023-50262
CWE-674 Medium
No
No
6.3.0 30.01.2024 SB2024013023
SB2024013025
#VU85893 - Uncontrolled Recursion
CVE-2023-50251
CWE-674 Medium
No
No
6.3.0 30.01.2024 SB2024013022
SB2024013025
SB2024071178
#VU81296 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-43655
CWE-94 High
No
No
6.3.0 29.09.2023 SB2023092947
SB2023092956
SB2023092957
and 13 more
#VU81101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3726
CWE-79 Low
No
No
6.2.0 25.09.2023 SB2023092533
SB2023092615
#VU70523 - Exposure of sensitive information to an unauthorized actor
CVE-2022-44381
CWE-200 Low
No
No
6.0.14 28.12.2022 SB2022122812
#VU70522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-44380
CWE-79 Low
No
No
6.0.14 28.12.2022 SB2022122811
#VU63174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
6.0.0 14.05.2022 SB2022051405
#VU62071 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1291
CWE-79 Low
No
No
5.4.2 11.04.2022 SB2022041129
SB2022041130
#VU60880 - Information Exposure Through an Error Message
CVE-2022-0622
CWE-209 Medium
No
No
5.4.0 25.02.2022 SB2022022517
#VU60575 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
5.3.10 14.02.2022 SB2022021406
#VU59074 - Server-Side Request Forgery (SSRF)
CVE-2021-4075
CWE-918 Medium
No
No
5.3.4 20.12.2021 SB2021122016
#VU59070 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10118
CWE-79 Low
No
No
4.6.14 20.12.2021 SB2019032716
#VU59068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3879
CWE-79
No
No
5.3.0 20.12.2021 SB2021122014
#VU59067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3863
CWE-79 Medium
No
No
5.3.0 20.12.2021 SB2021122014
#VU59066 - Cross-Site Request Forgery (CSRF)
CVE-2021-3858
CWE-352 Medium
No
No
5.3.0 20.12.2021 SB2021122014
#VU59063 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4018
CWE-79 Low
No
No
5.3.3 20.12.2021 SB2021122015
#VU59062 - Improper Access Control
CVE-2021-4089
CWE-284 Medium
No
No
5.3.4 20.12.2021 SB2021122016
#VU59061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4108
CWE-79 Low
No
No
5.3.5 20.12.2021 SB2021122017
#VU59060 - Cross-Site Request Forgery (CSRF)
CVE-2021-4130
CWE-352 Low
No
No
5.3.6 20.12.2021 SB2021122013


Showing elements 21 - 40 out of 121