Vulnerabilidades en snipe

28 resultados
Análisis Vexday

O Snipe apresenta 28 vulnerabilidades registradas, das quais 2 são críticas, mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é cross-site scripting (CWE-79), padrão em aplicações web. Com nenhuma CVE publicada nos últimos 90 dias, o risco atual é estável e de baixa prioridade operacional.

CVE-2022-23064HIGHSnipe-IT - Host Header InjectionEPSS 1.3%CVE-2022-0611MEDIUMMissing Authorization in snipe/snipe-itEPSS 1.2%CVE-2022-0579MEDIUMMissing Authorization in snipe/snipe-itEPSS 1.1%CVE-2022-0569MEDIUMObservable Discrepancy in snipe/snipe-itEPSS 1.0%CVE-2022-1511MEDIUMMissing Authorization in snipe/snipe-itEPSS 1.0%CVE-2022-0622MEDIUMGeneration of Error Message Containing Sensitive Information in snipe/snipe-itEPSS 1.0%CVE-2022-1155HIGHOld sessions are not blocked by the login enable function. in snipe/snipe-itEPSS 1.0%CVE-2021-4075LOWServer-Side Request Forgery (SSRF) in snipe/snipe-itEPSS 0.9%CVE-2022-1380CRITICALStored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-itEPSS 0.8%CVE-2021-3879MEDIUMCross-site Scripting (XSS) - Stored in snipe/snipe-itEPSS 0.8%CVE-2022-1445CRITICALStored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-itEPSS 0.8%CVE-2021-3863MEDIUMCross-site Scripting (XSS) - Generic in snipe/snipe-itEPSS 0.8%CVE-2021-4108MEDIUMCross-site Scripting (XSS) - Stored in snipe/snipe-itEPSS 0.8%CVE-2022-3173MEDIUMImproper Authentication in snipe/snipe-itEPSS 0.7%CVE-2021-3961HIGHCross-site Scripting (XSS) - Stored in snipe/snipe-itEPSS 0.7%CVE-2022-2997MEDIUMSession Fixation in snipe/snipe-itEPSS 0.7%CVE-2021-4089MEDIUMImproper Access Control in snipe/snipe-itEPSS 0.7%CVE-2022-0179MEDIUMMissing Authorization in snipe/snipe-itEPSS 0.6%CVE-2021-4018MEDIUMCross-site Scripting (XSS) - Stored in snipe/snipe-itEPSS 0.6%CVE-2022-3035MEDIUMCross-site Scripting (XSS) - Stored in snipe/snipe-itEPSS 0.6%