Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Grokability — Vulnerabilities & Security Advisories 26

Browse all 26 CVE security advisories affecting Grokability. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page serves as a vulnerability aggregation resource specifically focused on the vendor grokability, covering a broad spectrum of weakness types and security tags associated with its software ecosystem. The content compiled herein aggregates publicly disclosed security issues, ranging from critical remote code execution flaws to lower-severity information disclosure and denial-of-service vulnerabilities. This collection spans historical data from the early adoption phases of grokability products through to recent security updates, ensuring a comprehensive timeline of discovered and patched defects. Users can utilize this interface to track a vendor's advisories by monitoring how grokability responds to emerging threats and patches identified flaws. It also allows researchers to understand a weakness class within the context of this specific vendor’s architecture, revealing common patterns or systemic issues in their codebase. Additionally, individuals can look up a product's vulnerability history to assess long-term security posture and compare risk levels across different versions. The data is organized to facilitate efficient research for security analysts, developers, and enterprise risk managers who need to evaluate the impact of known defects on their deployment environments. By centralizing these details, the page aims to streamline the process of identifying potential exposures without requiring manual cross-referencing of multiple advisory feeds. This approach supports informed decision-making regarding patch management and system hardening strategies for organizations relying on grokability solutions.

Found 26 results / 26Clear Filters
Top products by Grokability: snipe-it
CVE IDTitleCVSSSeverityPublished
CVE-2026-19579 Snipe-IT Checkout Request Cancellation IDOR — Snipe-ITCWE-639 5.4 Medium2026-08-11
CVE-2026-55481 Snipe-IT: CSS Injection via `header_color` Setting — snipe-itCWE-79--2026-07-10
CVE-2026-55475 Snipe-IT: Import created_by can be overwritten — snipe-itCWE-863 5.7 Medium2026-07-10
CVE-2026-55469 Snipe-IT: Path traversal vulnerability via CSV import `image` field — snipe-itCWE-22 6.5 Medium2026-07-10
CVE-2026-55461 Snipe-IT: Open Redirect After User Edit — snipe-itCWE-601 6.1 Medium2026-07-10
CVE-2026-55479 Snipe-IT: Incorrect permission for legacy license checkin API — snipe-itCWE-863--2026-07-10
CVE-2026-55452 Snipe-IT: CSV formula injection in Activity Report export — snipe-itCWE-1236--2026-07-10
CVE-2026-55466 Snipe-IT: Stored XSS via inline-served attachment — snipe-itCWE-79--2026-07-10
CVE-2026-55515 Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint — snipe-itCWE-639 5.0 Medium2026-07-10
CVE-2026-55462 Snipe-IT: Authorization bypass on print inventory page — snipe-itCWE-863 4.3 Medium2026-07-10
CVE-2026-55464 Snipe-IT: Stored XSS via Markdown custom field — snipe-itCWE-79--2026-07-10
CVE-2026-55460 Snipe-IT: Authorization bypass on bulk editing users — snipe-itCWE-863 7.1 High2026-07-10
CVE-2026-55472 Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation — snipe-itCWE-863 4.3 Medium2026-07-10
CVE-2026-55476 Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter — snipe-itCWE-862--2026-07-10
CVE-2026-55478 Snipe-IT: Missing object-level authorization in Kits API — snipe-itCWE-639--2026-07-10
CVE-2026-55843 Snipe-IT: Improper Privilege Management — snipe-itCWE-269--2026-07-10
CVE-2026-55516 Snipe-IT: Cross-company asset maintenance re-parenting via API update — snipe-itCWE-639 7.7 High2026-07-10
CVE-2026-55474 Snipe-IT: Directory traversal in displaySig — snipe-itCWE-23--2026-07-10
CVE-2026-54329 Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API — snipe-itCWE-862 8.5 High2026-07-10
CVE-2026-48492 Snipe-IT's selectlist visibility is too permissive — snipe-itCWE-862--2026-07-08
CVE-2026-55542 Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL — snipe-itCWE-862--2026-07-08
CVE-2026-48493 Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment — snipe-itCWE-863 5.5 Medium2026-06-23
CVE-2026-48507 Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users — snipe-itCWE-863 7.1 High2026-06-08
CVE-2026-44833 Snipe-IT: Open redirect vulnerability — snipe-itCWE-601 5.9 Medium2026-05-26
CVE-2026-44832 Snipe-IT: Privilege Escalation via API Permissions Assignment — snipe-itCWE-281--2026-05-26
CVE-2026-44831 Snipe-IT: XSS vulnerability in component notes — snipe-itCWE-79 4.8 Medium2026-05-26

This page lists every published CVE security advisory associated with Grokability. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.