Vulnerabilidades em Grokability

90 resultados
Análise Vexday

Grokability apresenta footprint reduzido com apenas 1 vulnerabilidade registrada, ainda sem constatação de exploração ativa. A fraqueza identificada (CWE-639, relacionada a autorização/controle de acesso) foi recentemente publicada, demandando validação de sua relevância operacional e eventual remediação.

CVE-2026-48492MEDIUMSnipe-IT's selectlist visibility is too permissiveEPSS 0.4%CVE-2026-86760MEDIUMsnipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flagEPSS 0.4%CVE-2026-84206MEDIUMSnipe-IT before 8.7.0 Authorization Bypass via Bulk RestoreEPSS 0.4%CVE-2026-85616HIGHSnipe-IT before 8.6.2 Authorization Bypass via Checkout-AcceptanceEPSS 0.4%CVE-2026-55516HIGHSnipe-IT: Cross-company asset maintenance re-parenting via API updateEPSS 0.4%CVE-2026-86757HIGHSnipe-IT before 8.7.0 Information Disclosure via Custom FieldsEPSS 0.4%CVE-2026-86764HIGHSnipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned componentsEPSS 0.4%CVE-2026-86751HIGHSnipe-IT before 8.7.0 Arbitrary File Read and SSRF via MarkdownEPSS 0.4%CVE-2026-55519MEDIUMSnipe-IT: Improper Authorization in File Deletion (IDOR)EPSS 0.4%CVE-2026-86759HIGHSnipe-IT before 8.7.0 Missing Authorization via asset-history CSV importerEPSS 0.4%CVE-2026-62368HIGHSnipe-IT: Stored XSS via Custom Field name in asset-list column headersEPSS 0.4%CVE-2026-86745MEDIUMSnipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping ExportEPSS 0.4%CVE-2026-86739LOWSnipe-IT before 8.7.0 Acceptance Finalization Without Stored EvidenceEPSS 0.4%CVE-2026-86761MEDIUMsnipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpointsEPSS 0.4%CVE-2026-86741HIGHSnipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULAEPSS 0.4%CVE-2026-55483MEDIUMSnipe-IT: Privilege Escalation via Missing admin Permission Check in User CreationEPSS 0.4%CVE-2026-86768MEDIUMSnipe-IT before 8.7.0 Improper Input Validation via API CheckoutEPSS 0.3%CVE-2026-86766HIGHSnipe-IT 8.6.3 Race Condition via Consumable CheckoutEPSS 0.3%CVE-2026-55475MEDIUMSnipe-IT: Import created_by can be overwrittenEPSS 0.3%CVE-2026-55462MEDIUMSnipe-IT: Authorization bypass on print inventory pageEPSS 0.3%