https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2011-5250.htmlhttps://patchthecve.com/cve/CVE-2011-5250.htmlTue, 16 Jun 2026 23:36:13 +0000MEDIUM 6.5: Snare for Linux before 1.7.0 has CSRF in the web interface.https://patchthecve.com/cve/CVE-2011-5247.htmlhttps://patchthecve.com/cve/CVE-2011-5247.htmlTue, 16 Jun 2026 23:36:13 +0000HIGH 7.5: Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.https://patchthecve.com/cve/CVE-2019-11364.htmlhttps://patchthecve.com/cve/CVE-2019-11364.htmlWed, 17 Jun 2026 02:12:47 +0000HIGH 7.2: An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter.https://patchthecve.com/cve/CVE-2019-11363.htmlhttps://patchthecve.com/cve/CVE-2019-11363.htmlWed, 17 Jun 2026 02:12:46 +0000HIGH 7.2: A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter.