Known vulnerabilities in snipe-it - page 6

Vendor: snipe
Software: snipe-it
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 121
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting snipe-it snipe-it is affected by 121 known vulnerabilities: 2 high, 27 medium, 91 low Critical High Medium Low

Vulnerabilities (121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154184 - Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-367 Medium
No
No
8.5.0 13.10.2026 SB2026060948
#VU154180 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-915 Low
No
No
8.6.3 13.10.2026 SB20260814125
#VU154181 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-915 Low
No
No
8.6.3 13.10.2026 SB20260814125
#VU154182 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-915 Low
No
No
8.6.3 13.10.2026 SB20260814125
#VU154179 - Improper Authentication
CWE-287 Low
No
No
8.6.3 13.10.2026 SB20260814125
#VU154178 - Missing Encryption of Sensitive Data
CWE-311 Low
No
No
8.7.0 13.10.2026 SB2026082531
#VU153896 - Observable discrepancy
CWE-203 Low
No
No
8.7.0 07.10.2026 SB2026082531
#VU145118 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-62368
CWE-79 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145117 - Improper Access Control
CVE-2026-63493
CWE-284 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145116 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63498
CWE-79 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145115 - Incorrect Authorization
CVE-2026-86774
CWE-863 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145114 - Incorrect Authorization
CVE-2026-86773
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145113 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-86772
CWE-79 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU142579 - Improper Access Control
CVE-2026-55643
CWE-284 Medium
No
No
8.6.3 14.08.2026 SB20260814125
#VU142578 - Improper Access Control
CVE-2026-85617
CWE-284 Low
No
No
8.6.3 14.08.2026 SB20260814125
#VU142577 - Authorization Bypass Through User-Controlled Key
CVE-2026-55694
CWE-639 Low
No
No
8.6.3 14.08.2026 SB20260814125
#VU142576 - Missing Authorization
CVE-2026-55703
CWE-862 Low
No
No
8.6.3 14.08.2026 SB20260814125
#VU134511 - Authorization Bypass Through User-Controlled Key
CVE-2026-55482
CWE-639 Low
No
No
8.5.0 15.06.2026 SB2026060948
#VU134510 - Improper Access Control
CVE-2026-55483
CWE-284 Medium
No
No
8.5.0 15.06.2026 SB2026060948
#VU134016 - Improper Access Control
CVE-2026-50550
CWE-284 Low
No
No
8.5.0 09.06.2026 SB2026060948


Showing elements 101 - 120 out of 121