44 matches found
CVE-2024-1149 Improper validation of update packages
Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0;...
CVE-2024-1149 Improper validation of update packages
Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0;...
CVE-2023-7169 Impersonate vendor signed Powershell scripts
Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0...
CVE-2023-7169
Summary (CVE-2023-7169): Affected product is Snow Software Snow Inventory Agent on Windows. The issue is an Authentication Bypass by Spoofing (signature spoof) that impacts versions up to 6.14.5; customers are advised to upgrade to version 7.0. The NVD vector shows a likely local, low-attack-vect...
Snow Software Inventory Agent Security Vulnerability
Snow Software Inventory Agent is an agent program from Snow Software, a Swedish company. A security vulnerability exists in Snow Software Inventory Agent that stems from a Spoofing Bypass Authentication vulnerability that allows signature spoofing...
CVE-2023-3864
Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...
CVE-2023-3937
Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...
CVE-2023-3937
Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...
CVE-2023-3864
Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...
Cross site scripting
Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...
Sql injection
Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...
CVE-2023-3937
Snow Software License Manager (web portal) versions 9.0.0–9.30.1 on Windows are affected by a cross-site scripting vulnerability. An authenticated user with high privileges can trigger XSS via the web browser; the issue originates in the web portal and affects the stated versions. Exploitation de...
CVE-2023-3864
CVE-2023-3864 describes a blind SQL injection vulnerability in the Snow Software License Manager web portal. Affected versions are 8.0.0 through 9.30.1 on Windows. The issue allows a logged-in user with high privileges to inject SQL commands via the web portal, with impacts on confidentiality, in...
Snow Software license manager SQL injection vulnerability
Snow Software Snow License Manager SLM is the central hub of the Snow Software Asset Management platform from Snow Software, Sweden. A security vulnerability exists in Snow Software license manager versions 8.0.0 through 9.30.1 that originates from allowing a user with elevated privileges to inje...
PT-2023-26898 · Snow · Software License Manager
Name of the Vulnerable Software and Affected Versions: Snow Software License Manager versions 9.0.0 through 9.30.1 Description: The issue is a cross site scripting vulnerability in the web portal of Snow Software License Manager. This allows an authenticated user with high privileges to trigger a...
PT-2023-26536 · Snow · Software License Manager
Name of the Vulnerable Software and Affected Versions: Snow Software license manager versions 8.0.0 through 9.30.1 Description: The issue is related to a blind SQL injection in a service running in the Snow Software license manager. This allows a logged-in user with high privileges to inject SQL...
CVE-2023-2679
Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...
CVE-2023-2679
Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...