Alta
CVE-2026-54329
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 82
Restablecer filtros
Baja
CVE-2026-55542
Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL
Baja
CVE-2026-55519
Snipe-IT has Improper Authorization in File Deletion (IDOR)
Media
CVE-2026-55483
Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
Media
CVE-2026-55482
Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update
Media
CVE-2026-50550
Snipe-IT has a 2FA reset privilege bypass
Media
CVE-2026-49976
Snipe-IT Vulnerable to User Account Escalation via CSV Import
Media
CVE-2026-49870
Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`
Alta
CVE-2026-48507
Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users
Media
CVE-2026-48493
Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment
Media
CVE-2026-48492
Snipe-IT's selectlist visibility is too permissive
Media
CVE-2026-44833
Snipe-IT has an open redirect vulnerability
Crítica
CVE-2026-37709
Snipe-IT has insecure permissions in file uploads
Alta
CVE-2026-44832
Snipe-IT has Privilege Escalation via API Permissions Assignment
Media
CVE-2026-44831
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)
Alta
CVE-2025-15602
Snipe-IT has sensitive user attributes related to account privileges that are insufficiently protected against mass assignment
Media
CVE-2025-65622
Snipe-IT allows stored XSS via the Locations "Country" field
Media
CVE-2025-65621
Snipe-IT is vulnerable to stored cross-site scripting
Media
CVE-2025-64027
Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow
Media
CVE-2025-59713
Snipe-IT allows unsafe deserialization
Media
CVE-2025-59712
Snipe-IT allows XSS
Media
CVE-2025-47226
Grokability Snipe-IT has incorrect authorization for accessing asset information
Alta
CVE-2024-51093
Cross Site Scripting vulnerability in Snipe-IT
Alta
CVE-2024-48987
Snipe-IT remote code execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.