PatchTheCVEsn1per vulnerabilities and fixes
Recent CVEs affecting sn1per, with upgrade or downgrade steps. 2 tracked.
sn1per has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-08-19. Highest priority: CVE-2021-39274 (score 66/100).
- CVE-2021-39274 CRITICAL 9.8 DOWNGRADE In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation,
- CVE-2021-39273 HIGH 8.8 DOWNGRADE In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, all
FAQ
How do I fix sn1per vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sn1per being exploited right now?
None of the tracked sn1per CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sn1per CVE should I patch first?
CVE-2021-39274 currently ranks highest (66/100): In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, .