CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Github Security Blog•added 2022/12/25 6:30 a.m.•41 views

Snipe-IT allows attackers to check whether a user account exists

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...

5.3CVSS5.4AI score0.00653EPSS

SaveExploits1References3Affected Software1

Prion•added 2022/12/25 5:15 a.m.•30 views

Design/Logic Flaw

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...

5CVSS5.2AI score0.00653EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2022/12/25 12:00 a.m.•40 views

CVE-2022-44381

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...

5.5AI score0.00653EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2022/12/25 12:00 a.m.•7 views

CVE-2022-44381: Observable Discrepancy

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...

5.3CVSS5.8AI score0.00653EPSS

SaveExploits1References3

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by