Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

TI-2024-01067 CVE-2024-1150 · GHSA-fcj4-pm86-7gjw

Improper validation of update packages

Priority LOW 33

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 7.3.1.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2024-02-08 No fix listed CWE-347
TI-2024-01066 CVE-2024-1149 · GHSA-7w7c-rqj8-5pmg

Improper validation of update packages

Priority LOW 35

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2024-02-08 No fix listed CWE-347
Priority LOW 26

Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.0016 Published 2024-02-08 No fix listed CWE-290