Snipsnap

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-9559 Feb 03, 16:59 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML via the query parameter to /snipsnap-search. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Snipsnap

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2014-5891 Sep 15, 14:55 MEDIUM This Month

The SnipSnap Coupon App (aka com.snipsnap.snipsnapapp) application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Snipsnap Snipsnap Coupon App

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2014-9559

EPSS 0% CVSS 4.3

MEDIUM This Month

XSS Snipsnap

NVD

CVE-2014-5891

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Snipsnap +1

NVD