Vulnerabilities > Snipeitapp > Snipe IT > 4.6.0

DATE CVE VULNERABILITY TITLE RISK
2022-03-30 CVE-2022-1155 Unspecified vulnerability in Snipeitapp Snipe-It
Old sessions are not blocked by the login enable function.
network
low complexity
snipeitapp
7.4
2022-02-17 CVE-2022-0622 Unspecified vulnerability in Snipeitapp Snipe-It
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.
network
low complexity
snipeitapp
5.3
2022-02-16 CVE-2022-0611 Unspecified vulnerability in Snipeitapp Snipe-It
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.
network
low complexity
snipeitapp
8.8
2022-02-14 CVE-2022-0579 Unspecified vulnerability in Snipeitapp Snipe-It
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.
network
low complexity
snipeitapp
6.5
2022-02-14 CVE-2022-0569 Unspecified vulnerability in Snipeitapp Snipe-It
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.
network
low complexity
snipeitapp
4.3
2022-01-13 CVE-2022-0178 Unspecified vulnerability in Snipeitapp Snipe-It
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8.
network
low complexity
snipeitapp
5.4
2022-01-12 CVE-2022-0179 Unspecified vulnerability in Snipeitapp Snipe-It
snipe-it is vulnerable to Missing Authorization
network
low complexity
snipeitapp
5.4
2021-12-18 CVE-2021-4130 Unspecified vulnerability in Snipeitapp Snipe-It
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
network
low complexity
snipeitapp
8.8
2021-12-14 CVE-2021-4108 Unspecified vulnerability in Snipeitapp Snipe-It
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
network
low complexity
snipeitapp
6.1
2021-12-10 CVE-2021-4089 Missing Authorization vulnerability in Snipeitapp Snipe-It
snipe-it is vulnerable to Improper Access Control
network
low complexity
snipeitapp CWE-862
4.3