115 matches found
CVE-2022-1511 Missing Authorization in snipe/snipe-it
Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4...
CVE-2022-1445 Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it
Stored Cross Site Scripting vulnerability in the checkedoutto parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie...
CVE-2022-1380 Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it
Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie...
CVE-2022-1380
CVE-2022-1380 is a Stored Cross-Site Scripting vulnerability in the snipe-it project’s Item name parameter, affecting all versions prior to 5.4.3. The root cause is unsanitized item name input that can execute injected scripts and potentially steal user cookies, enabling session hijacking. Public...
CVE-2022-1380
Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie...
PT-2022-13842
Name of the Vulnerable Software and Affected Versions snipe/snipe-it versions prior to 5.4.3 Description The issue is related to a Stored Cross Site Scripting vulnerability in the Item name parameter. This vulnerability can lead to the theft of a user's Cookie. Recommendations For versions prior ...
CVE-2022-1380: Improper Neutralization of Input During Web Page Generation
Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie...
Code injection
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10...
CVE-2022-1155 Old sessions are not blocked by the login enable function. in snipe/snipe-it
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10...
An unspecified vulnerability exists in snipe-it (CNVD-2022-13366)
Snipe-IT is an open source IT asset/license management system. snipe-it has a security vulnerability that stems from the generation of error messages containing sensitive information in Packagist snipe/snipe-it prior to 5.3.11. No detailed vulnerability details are currently available...
CVE-2022-0622
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...
Information disclosure
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...
CVE-2022-0622
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...
CVE-2022-0622: Generation of Error Message Containing Sensitive Information
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...
PT-2022-13306
Name of the Vulnerable Software and Affected Versions snipe/snipe-it versions prior to 5.3.11 Description The issue concerns the generation of error messages that contain sensitive information. This could potentially expose critical data, posing a risk to the security of the system. Recommendatio...
CVE-2022-0611
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...
Authorization
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...
An unspecified vulnerability exists in snipe-it (CNVD-2022-18045)
Snipe-IT is an open source IT asset/license management system. security vulnerability exists in Packagist snipe/snipe-it versions prior to 5.3.9, which stems from improper privilege management. No details of the vulnerability are currently available...