Lucene search
+L

7009 matches found

OSV
OSV
•added 2026/07/10 7:29 p.m.•10 views

MINI-9F8J-JHCF-G4QF

Bulletin has no description...

5.3CVSS6.1AI score0.00413EPSS
SaveExploits0
OSV
OSV
•added 2026/07/10 7:29 p.m.•13 views

MINI-28FR-54CP-88WC

Bulletin has no description...

6.6AI score0.00527EPSS
SaveExploits0
OSV
OSV
•added 2026/07/10 7:29 p.m.•9 views

MINI-59P7-7795-X9CJ

Bulletin has no description...

5.3CVSS6.7AI score0.00512EPSS
SaveExploits1
OSV
OSV
•added 2026/07/10 7:29 p.m.•12 views

MINI-QJXC-HCCF-XC25

Bulletin has no description...

9.1CVSS6.1AI score0.00487EPSS
SaveExploits0
OSV
OSV
•added 2026/07/10 7:28 p.m.•12 views

MINI-7JM8-9258-2XJX

Bulletin has no description...

6.1CVSS6.1AI score0.00341EPSS
SaveExploits0
NVD
NVD
•added 2026/07/10 7:17 p.m.•32 views

CVE-2026-55472

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...

4.3CVSS0.00331EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/10 6:36 p.m.•54 views

CVE-2026-55472

Snipe-IT (IT asset/license management) prior to version 8.6.2 permits creating a child location under a parent from a different company when Full Multiple Companies Support and scope_locations_fmcs are enabled. The API location creation endpoint detects an invalid parent-child company mismatch bu...

4.3CVSS6.1AI score0.00331EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/07/10 6:36 p.m.•60 views

CVE-2026-55472 Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...

4.3CVSS0.00331EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/10 6:36 p.m.•13 views

CVE-2026-55472

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...

4.3CVSS6.1AI score0.00331EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/10 6:36 p.m.•12 views

CVE-2026-55472 Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...

4.3CVSS6.1AI score0.00331EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/10 6:36 p.m.•16 views

CVE-2026-55472 Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...

4.3CVSS6.1AI score
SaveExploits0References5
OSV
OSV
•added 2026/07/10 8:16 a.m.•10 views

MINI-WG22-9Q7G-94JR

Bulletin has no description...

7.8CVSS6.1AI score0.00182EPSS
SaveExploits0
OSV
OSV
•added 2026/07/10 8:16 a.m.•11 views

MINI-7937-F36J-36H4

Bulletin has no description...

5.3CVSS6.1AI score0.00413EPSS
SaveExploits0
OSV
OSV
•added 2026/07/10 1:34 a.m.•12 views

MINI-9PPH-VJ22-82RF

Bulletin has no description...

5.3CVSS6.1AI score0.00413EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•0 views

CVE-2026-55472: Incorrect Authorization

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scopelocationsfmcs are enabled, the API location creation endpoint detects an invalid parent-child company mismatch but does not return immediately, allowing creation of a child location...

4.3CVSS5.8AI score0.00331EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•33 views

PT-2026-57266

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.6.2 Description When Full Multiple Companies Support and scope locations fmcs are enabled, the API location creation endpoint fails to terminate the process after detecting an invalid parent-child company mismatch...

4.3CVSS6.1AI score0.00331EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•2 views

CVE-2026-15081: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Selector versions: from 0.0.0 to 1.3.0...

7.4CVSS5.8AI score0.00336EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/09 11:05 p.m.•9 views

MINI-Q5RQ-53X2-QH2M

Bulletin has no description...

6.1AI score
SaveExploits0
OSV
OSV
•added 2026/07/09 10:36 p.m.•14 views

MINI-V4R9-4282-4CJW

Bulletin has no description...

7.8CVSS6.1AI score0.00182EPSS
SaveExploits0
OSV
OSV
•added 2026/07/09 9:46 p.m.•13 views

MINI-JFM7-4FX3-9C44

Bulletin has no description...

7.8CVSS6.1AI score0.00182EPSS
SaveExploits0
Rows per page
Query Builder