Snow Software Inventory Agent Security Vulnerability

Snow Software Inventory Agent is an agent program from Snow Software, a Swedish company. A security vulnerability exists in Snow Software Inventory Agent that stems from a Spoofing Bypass Authentication vulnerability that allows signature spoofing...

Snow Software Inventory Agent Data Forgery Issue Vulnerability

Snow Software Inventory Agent is an agent program from Snow Software of Sweden. Snow Software Inventory Agent is vulnerable to a data forgery issue that stems from incorrect cryptographic signature validation that allows file manipulation via update packages...

blake-streams (0.1.0), canary (>=0.0.6, <=0.1.6) +65 more potentially affected by CVE-2024-58265 via snow (>=0.1.9, <=0.9.3)

snow CARGO version =0.1.9, =0.0.6, =0.8.0, =0.1.0, =0.1.0, =0.1.5, =0.8.0, =0.10.0, =1.0.0-rc.2, =0.8.0, =0.8.0, =1.0.0-rc.1, =0.13.0-rc.1, =1.0.0-rc.1, =0.8.0, =1.0.0 and more Source cves: CVE-2024-58265 Source advisory: OSV:GHSA-7G9J-G5JG-3VV3...

Unauthenticated Nonce Increment in snow

Impact There was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with the ability to inject packets into the channel Noise is talking over, this allows a denial-of-service type attack which could prevent communication as it...

GHSA-7G9J-G5JG-3VV3 Unauthenticated Nonce Increment in snow

Impact There was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with the ability to inject packets into the channel Noise is talking over, this allows a denial-of-service type attack which could prevent communication as it...

blake-streams (0.1.0), canary (>=0.0.6, <=0.1.6) +65 more potentially affected by CVE-2024-58265 via snow (>=0.1.9, <=0.9.3)

snow CARGO version =0.1.9, =0.0.6, =0.8.0, =0.1.0, =0.1.0, =0.1.5, =0.8.0, =0.10.0, =1.0.0-rc.2, =0.8.0, =0.8.0, =1.0.0-rc.1, =0.13.0-rc.1, =1.0.0-rc.1, =0.8.0, =1.0.0 and more Source cves: CVE-2024-58265 Source advisory: OSV:RUSTSEC-2024-0011...

Unauthenticated Nonce Increment in snow

There was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with privileges to inject packets into the channel over which the Noise session operates, this could allow a denial-of-service attack which could prevent message...

RUSTSEC-2024-0011 Unauthenticated Nonce Increment in snow

There was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with privileges to inject packets into the channel over which the Noise session operates, this could allow a denial-of-service attack which could prevent message...

PT-2025-31024 · Snow · Snow

Name of the Vulnerable Software and Affected Versions: snow crate versions prior to 0.9.5 Description: The snow crate, when using stateful TransportState, allows incrementing a nonce, potentially leading to denial of message delivery. Recommendations: Update to snow crate version 0.9.5 or later...

The vulnerability of the Snow License Manager Service Provider Edition software, related to privilege management errors, allows a violator to gain unauthorized access to protected information.

The vulnerability of the Snow License Manager Service Provider Edition software-related license management software is related to privilege management errors. Exploiting this vulnerability allows an intruder to gain unauthorized access to protected information...

CVE-2023-3864

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...

CVE-2023-3937

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2023-3937

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2023-3864

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...

Cross site scripting

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

Sql injection

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...

CVE-2023-3937

Snow Software License Manager (web portal) versions 9.0.0–9.30.1 on Windows are affected by a cross-site scripting vulnerability. An authenticated user with high privileges can trigger XSS via the web browser; the issue originates in the web portal and affects the stated versions. Exploitation de...

CVE-2023-3937 Cross site scripting vulnerabilities in Snow License Manager

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2023-3937 Cross site scripting vulnerabilities in Snow License Manager

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2023-3864 SQL injection vulnerability in Snow License Manager

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal...