CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

attackerkb•added 2021/12/01 10:15 a.m.•12 views

CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS6.2AI score0.00656EPSS

SaveExploits1References3

OSV•added 2021/12/01 10:15 a.m.•19 views

CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.7AI score

SaveExploits0References2

NVD•added 2021/12/01 10:15 a.m.•27 views

CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS0.00656EPSS

SaveExploits1References2

CVE•added 2021/12/01 10:00 a.m.•81 views

CVE-2021-4018

CVE-2021-4018 is a stored Cross-site Scripting (XSS) vulnerability affecting snipe-it. Public sources describe an XSS flaw in the web page generation path, with the vulnerability located in checkout/notes handling (notably via AccessoriesTransformer.php/transformCheckedoutAccessory) that allows i...

6.3CVSS6.4AI score0.00656EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2021/12/01 10:00 a.m.•30 views

CVE-2021-4018 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS5.7AI score0.00656EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by