snipsnap records

3 published records for vendor snipsnap.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2004-1470Proof of concept	CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splittingsnipsnap · snipsnap Pre-auth	Medium5.0	—	2.4%	Dec 31, 2004
21Monitor	CVE-2014-5891No exploit	The SnipSnap Coupon App (aka com.snipsnap.snipsnapapp) application 1.1.11 for Android does not verify X.509 certificates from SSL servers, wsnipsnap · snipsnap coupon app · CWE-310	Medium5.4	—	0.2%	Sep 15, 2014
17Monitor	CVE-2014-9559No exploit	Cross-site scripting (XSS) vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTMLsnipsnap · snipsnap · CWE-79 Pre-auth XSS	Medium4.3	—	0.9%	Feb 3, 2015

CVE-2004-1470
21Monitor
CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting
MediumCVSS 5.0Proof of conceptEPSS 2%
- Pre-auth
snipsnap · snipsnapDec 31, 2004
CVE-2014-5891
21Monitor
The SnipSnap Coupon App (aka com.snipsnap.snipsnapapp) application 1.1.11 for Android does not verify X.509 certificates from SSL servers, w
MediumCVSS 5.4No exploitEPSS 0%
snipsnap · snipsnap coupon appSep 15, 2014
CVE-2014-9559
17Monitor
Cross-site scripting (XSS) vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- XSS
snipsnap · snipsnapFeb 3, 2015