CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2024-51094

An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into the "Name" field. When an administrator later accesses the People Management page, exports the data as a CSV file, and opens it, the injected payload will be...

CVE-2024-51093

Stored Cross-Site Scripting XSS vulnerability in Snipe-IT - v7.0.13 allows an attacker to upload a malicious XML file containing JavaScript code. This can lead to privilege escalation when the payload is executed, granting the attacker super admin permissions within the Snipe-IT system...

CVE-2022-2997

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...

CVE-2022-0579

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...

CVE-2022-32061

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

CVE-2022-44381

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...

CVE-2022-44380

Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting XSS for View Assigned Assets...

CVE-2022-32060

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

CVE-2022-1511

Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4...

CVE-2022-0179

snipe-it is vulnerable to Missing Authorization...

CVE-2021-3938

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3961

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3931

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4130

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4089

snipe-it is vulnerable to Improper Access Control...

CVE-2021-3879

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...