Lucene search
+L

7 matches found

Snyk
Snyk
•added 2026/09/09 3:20 p.m.•8 views

Unchecked Return Value

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Unchecked Return Value in the handleImages process. An attacker can cause unrecoverable loss of existing images and create a persistent inconsistency between the database an...

7CVSS5.7AI score0.00339EPSS
SaveExploits1References2
NVD
NVD
•added 2026/09/09 2:17 p.m.•9 views

CVE-2026-86749

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

7CVSS0.00339EPSS
SaveExploits1References2
OSV
OSV
•added 2026/09/09 1:32 p.m.•10 views

CVE-2026-86749 snipe-it before 8.7.0 Data Loss via Failed Image Write

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

7CVSS5.6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/09 1:32 p.m.•10 views

EUVD-2026-74926

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

7CVSS5.6AI score0.00339EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•11 views

PT-2026-89018

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

7CVSS5.6AI score0.00339EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2021-22802

Malware in sbrugna...

3.5CVSS3.9AI score0.0045EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 6:41 p.m.•28 views

CVE-2021-36181

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.5CVSS6.9AI score0.0045EPSS
SaveExploits0References1
Rows per page
Query Builder