Snowsoftware - vulnerabilities (CVEs)

12 CVEs in 5 products, 0 in the last 30 days, newest from 2024-05-14.

Products

Newest CVEs of Snowsoftware

CVE-2024-4129 - CVSS 8.8 (high), 2024-05-14: Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if…
CVE-2024-1150 - CVSS 7.8 (high), 2024-02-08: Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update…
CVE-2024-1149 - CVSS 7.8 (high), 2024-02-08: Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow…
CVE-2023-7169 - CVSS 6 (medium), 2024-02-08: Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory…
CVE-2023-3937 - CVSS 4.8 (medium), 2023-08-11: Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an…
CVE-2023-3864 - CVSS 7.2 (high), 2023-08-11: Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user…
CVE-2023-2679 - CVSS 4.3 (medium), 2023-05-17: Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.
CVE-2022-0883 - CVSS 7.8 (high), 2022-05-18: SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue. All installations version 9.x.x prior to 9.20.1 should be patched.
CVE-2021-4106 - CVSS 7.8 (high), 2022-02-16: A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges. This issue affects: SNOW Snow…
CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
CVE-2021-41562 - CVSS 6.1 (medium), 2021-11-03: A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows…
CVE-2021-27579 - CVSS 7.8 (high), 2021-02-23: Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A…