81 matches found
EUVD-2022-1334
Malicious code in bioql PyPI...
Snipe-IT 代码问题漏洞
Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A code issue vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from insecure deserialization...
Linux Distros Unpatched Vulnerability : CVE-2022-21670
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser...
Markdown-It 安全漏洞
Markdown-It is a Markdown parser from the Markdown it! open source. A security vulnerability exists in Markdown-It version 14.1.0 that stems from improper input neutralization and could lead to cross-site scripting...
CVE-2024-51093
Stored Cross-Site Scripting XSS vulnerability in Snipe-IT - v7.0.13 allows an attacker to upload a malicious XML file containing JavaScript code. This can lead to privilege escalation when the payload is executed, granting the attacker super admin permissions within the Snipe-IT system...
CVE-2022-2997
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...
CVE-2022-44381
Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...
CVE-2022-44380
Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting XSS for View Assigned Assets...
CVE-2022-32060
An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-1511
Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4...
CVE-2022-0179
snipe-it is vulnerable to Missing Authorization...
CVE-2022-35864
This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of...
CVE-2021-3938
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3961
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3858
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3931
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4089
snipe-it is vulnerable to Improper Access Control...