Known vulnerabilities in snipe-it - page 5

Vendor: snipe
Software: snipe-it
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting snipe-it snipe-it is affected by 112 known vulnerabilities: 2 high, 25 medium, 84 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134512 - Improper Authorization
CVE-2026-55519
CWE-285 Low
No
No
8.4.1 15.06.2026 SB2026051174
#VU130988 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-44831
CWE-79 Low
No
No
8.4.1 11.05.2026 SB2026051174
#VU130987 - Improper Access Control
CVE-2026-44832
CWE-284 Medium
No
No
8.4.1 11.05.2026 SB2026051174
#VU130986 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-44833
CWE-601 Low
No
No
8.4.1 11.05.2026 SB2026051174
#VU130985 - Improper Access Control
CVE-2026-37709
CWE-284 Low
No
No
8.4.1 11.05.2026 SB2026051174
#VU87176 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-25117
CWE-94 High
No
No
6.3.2 07.03.2024 SB2024030706
SB2024030707
SB2024071178
#VU86829 - Improper input validation
CVE-2024-27355
CWE-20 Medium
No
No
6.3.3 27.02.2024 SB2024022726
SB2024031128
SB20250529165
#VU86826 - Improper input validation
CVE-2024-27354
CWE-20 Medium
No
No
6.3.3 27.02.2024 SB2024022726
SB2024031128
SB2025042954
and 2 more
#VU85898 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51651
CWE-22 Low
No
No
6.3.0 30.01.2024 SB2024013024
SB2024013025
#VU85894 - Uncontrolled Recursion
CVE-2023-50262
CWE-674 Medium
No
No
6.3.0 30.01.2024 SB2024013023
SB2024013025
#VU85893 - Uncontrolled Recursion
CVE-2023-50251
CWE-674 Medium
No
No
6.3.0 30.01.2024 SB2024013022
SB2024013025
SB2024071178
#VU83510 - Resource exhaustion
CVE-2023-49316
CWE-400 Medium
No
No
6.3.0 27.11.2023 SB2023112762
SB2024013025
#VU81296 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-43655
CWE-94 High
No
No
6.3.0 29.09.2023 SB2023092947
SB2023092956
SB2023092957
and 13 more
#VU81101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3726
CWE-79 Low
No
No
6.2.0 25.09.2023 SB2023092533
SB2023092615
#VU70523 - Exposure of sensitive information to an unauthorized actor
CVE-2022-44381
CWE-200 Low
No
No
6.0.14 28.12.2022 SB2022122812
#VU70522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-44380
CWE-79 Low
No
No
6.0.14 28.12.2022 SB2022122811
#VU63174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
6.0.0 14.05.2022 SB2022051405
#VU62071 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1291
CWE-79 Low
No
No
5.4.2 11.04.2022 SB2022041129
SB2022041130
#VU60880 - Information Exposure Through an Error Message
CVE-2022-0622
CWE-209 Medium
No
No
5.4.0 25.02.2022 SB2022022517
#VU60575 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
5.3.10 14.02.2022 SB2022021406


Showing elements 81 - 100 out of 112