Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 82
Reset filtersHost header injection in the password reset
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Cross-site Scripting in snipe/snipe-it
Snipe-IT allows attackers to check whether a user account exists
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets
Snipe-IT vulnerable to Improper Authentication
snipe-it vulnerable to cross-site scripting (XSS)
Insufficient Session Expiration in snipe/snipe-it
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
Snipe-IT XSS Vulnerability
snipe-IT vulnerable to host header injection
Improper Access Control in snipe/snipe-it
Stored cross-site scripting in Snipe-IT
Cross-site Scripting in snipe-it
Old sessions not blocked by login enable function in Snipe-IT
Generation of Error Message Containing Sensitive Information in Snipe-IT
Improper Privilege Management in Snipe-IT
Exposure of Sensitive Information in snipe/snipe-it
Improper Privilege Management in Snipe-IT
Improper Access Control in snipe-it
Incorrect Default Permissions and Improper Access Control in snipe-it
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.