2m3.it Cross Site Scripting vulnerability OBB-2378240

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ad8.it Cross Site Scripting vulnerability OBB-2377524

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-24047

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-24047

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-24047

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-24047

CVE-2022-24047 affects BMC Track-It! 20.21.01.102 where an HTTP authorization flaw permits remote authentication bypass without credentials. Root cause: lack of authentication prior to accessing functionality, enabling an unauthenticated attacker to bypass login. Multiple sources (including ZDI-2...

Information Exposure

snipe/snipe-it is vulnerable to information exposure. The vulnerability exists in the sendResetLinkEmail function in the ForgotPasswordController.php file, allowing an attacker to read sensitive information in the system...

GHSA-PWWM-PWX2-2HW7 Generation of Error Message Containing Sensitive Information in Snipe-IT

Snipe-IT prior to version 5.3.11 is vulnerable to Generation of Error Message Containing Sensitive Information...

An unspecified vulnerability exists in snipe-it (CNVD-2022-13366)

Snipe-IT is an open source IT asset/license management system. snipe-it has a security vulnerability that stems from the generation of error messages containing sensitive information in Packagist snipe/snipe-it prior to 5.3.11. No detailed vulnerability details are currently available...

Privilege Escalation

snipe/snipe-it is vulnerable to privilege escalation. The vulnerability exists in AssetMaintenancesController.php and AssetMaintenancesController.php due to missing edit / delete Asset gates which allows an unauthenticated user to create maintenance for asset...

CVE-2022-0622

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...

CVE-2022-0622

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...

Information disclosure

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...

CVE-2022-0622

Affected software: snipe-it (Packagist package snipe/snipe-it). Vulnerability: Generation of an error message containing sensitive information in Snipe-IT prior to version 5.3.11, leading to information exposure. Root cause/impact: The error handling path in the application reveals sensitive data...

CVE-2022-0622 Generation of Error Message Containing Sensitive Information in snipe/snipe-it

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...

GHSA-J57W-3C39-GPP5 Improper Privilege Management in Snipe-IT

An unprivileged user of Snipe-IT prior to version 5.3.11 can create maintenance for an asset. Version 5.3.11 contains a patch for this issue...

Improper Privilege Management in Snipe-IT

An unprivileged user of Snipe-IT prior to version 5.3.11 can create maintenance for an asset. Version 5.3.11 contains a patch for this issue...

Atlassian Jira Service Management Server Licensing Issue Vulnerability

Atlassian Jira Service is a server-based version of Atlassian Australia's IT service desk and request tracking system, which is used to receive, track and manage requests from team clients. An authorization issue vulnerability exists in Atlassian Jira Service Management Server, which stems from...

snipe-it 安全漏洞

Snipe-IT is an open source IT asset/license management system. snipe-it has a security vulnerability that stems from the generation of error messages containing sensitive information in Packagist snipe/snipe-it prior to 5.3.11. No detailed vulnerability details are currently available...

snipe-it elevation of privilege vulnerability

Snipe-IT is an open source IT asset/license management system. snipe-it versions prior to 5.3.11 contain an elevation of privilege vulnerability that stems from improper privilege management in the software. An attacker could exploit the vulnerability to cause a non-privileged user to create...