Alta
CVE-2024-5685
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 82
Restablecer filtros
Alta
CVE-2024-23648
Host header injection in the password reset
Alta
CVE-2023-5511
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Media
CVE-2023-5452
Cross-site Scripting in snipe/snipe-it
Media
CVE-2022-44381
Snipe-IT allows attackers to check whether a user account exists
Media
CVE-2022-44380
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets
Media
CVE-2022-3173
Snipe-IT vulnerable to Improper Authentication
Media
CVE-2022-3035
snipe-it vulnerable to cross-site scripting (XSS)
Media
CVE-2022-2997
Insufficient Session Expiration in snipe/snipe-it
Media
CVE-2022-32061
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
Media
CVE-2022-32060
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
Media
CVE-2019-10118
Snipe-IT XSS Vulnerability
Alta
CVE-2022-23064
snipe-IT vulnerable to host header injection
Media
CVE-2022-1511
Improper Access Control in snipe/snipe-it
Media
CVE-2022-1445
Stored cross-site scripting in Snipe-IT
Media
CVE-2022-1380
Cross-site Scripting in snipe-it
Alta
CVE-2022-1155
Old sessions not blocked by login enable function in Snipe-IT
Media
CVE-2022-0622
Generation of Error Message Containing Sensitive Information in Snipe-IT
Alta
CVE-2022-0611
Improper Privilege Management in Snipe-IT
Media
CVE-2022-0569
Exposure of Sensitive Information in snipe/snipe-it
Media
CVE-2022-0579
Improper Privilege Management in Snipe-IT
Media
CVE-2022-0178
Improper Access Control in snipe-it
Media
CVE-2022-0179
Incorrect Default Permissions and Improper Access Control in snipe-it
Alta
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.