Vulnerability index

Browse CVEs

170 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Glpi HIGH 8.8
CVE-2024-47760

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access to the A…

Fix: 10.0.17+
Fix from $1,950 2024-12-11
Glpi HIGH 7.2
CVE-2024-47761

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the s…

Fix: 10.0.17+
Fix from $1,950 2024-12-11
Glpi HIGH 8.8
CVE-2024-47758

GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can use the AP…

Fix: 10.0.17+
Fix from $1,950 2024-12-11
Glpi MEDIUM 5.3
CVE-2024-43416

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an ap…

Fix: 10.0.17+
Fix from $1,600 2024-11-18
Glpi HIGH 7.5
CVE-2024-38370

GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API wi…

Fix: 10.0.16+
Fix from $1,950 2024-11-15
Glpi MEDIUM 6.1
CVE-2024-45610

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An…

Fix: 10.0.17+
Fix from $1,600 2024-11-15
Glpi MEDIUM 5.4
CVE-2024-45611

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An…

Fix: 10.0.17+
Fix from $1,600 2024-11-15
Glpi MEDIUM 6.1
CVE-2024-45609

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unaut…

Fix: 10.0.17+
Fix from $1,600 2024-11-15
Glpi HIGH 8.8
CVE-2024-45608

GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.…

Fix: 10.0.17+
Fix from $1,950 2024-11-15
Glpi HIGH 8.8
CVE-2024-41679

GLPI is a free asset and IT management software package. An authenticated user can exploit a SQL injection vulnerability from the ticket form. Upgrad…

Fix: 10.0.17+
Fix from $1,950 2024-11-15
Glpi MEDIUM 6.1
CVE-2024-43417

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploi…

Fix: 10.0.17+
Fix from $1,600 2024-11-15
Glpi MEDIUM 6.1
CVE-2024-43418

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploi…

Fix: 10.0.17+
Fix from $1,600 2024-11-15
Glpi HIGH 8.8
CVE-2024-40638EPSS 37%

GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be…

Fix: 10.0.17+
Fix from $1,950 2024-11-15
Glpi MEDIUM 6.1
CVE-2024-41678

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploi…

Fix: 10.0.17+
Fix from $1,600 2024-11-15
Glpi HIGH 8.8
CVE-2024-37149EPSS 21%

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An…

Fix: 10.0.16+
Fix from $1,950 2024-07-10
Glpi HIGH 8.1
CVE-2024-37148EPSS 20%

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An…

Fix: 10.0.16+
Fix from $1,950 2024-07-10
Glpi HIGH 8.1
CVE-2024-29889EPSS 63%

GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the sav…

Fix: 10.0.15+
Fix from $1,950 2024-05-07
Glpi MEDIUM 6.5
CVE-2024-31456EPSS 59%

GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability from map s…

Fix: 10.0.15+
Fix from $1,600 2024-05-07
Glpi Agent HIGH 7.8
CVE-2024-28240

The GLPI Agent is a generic management agent. A vulnerability that only affects GLPI-Agent installed on windows via MSI packaging can allow a local u…

Fix: 1.7.2+
Fix from $1,950 2024-04-25
Glpi Agent HIGH 7.8
CVE-2024-28241

The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DLLs to modify agent logic and …

Fix: 1.7.2+
Fix from $1,950 2024-04-25
Glpi MEDIUM 6.1
CVE-2024-27914

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unaut…

Fix: 10.0.13+
Fix from $1,600 2024-03-18
Glpi CRITICAL 9.6
CVE-2024-27098EPSS 36%

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authe…

Fix: 10.0.13+
Fix from $2,300 2024-03-18
Glpi MEDIUM 6.5
CVE-2024-27096EPSS 59%

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authe…

Fix: 10.0.13+
Fix from $1,600 2024-03-18
Glpi MEDIUM 6.5
CVE-2024-27930

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authe…

Fix: 10.0.13+
Fix from $1,600 2024-03-18
Glpi HIGH 8.8
CVE-2024-27756

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title.

Fix: after 10.0.12
Fix from $1,950 2024-03-15
Glpi HIGH 8.1
CVE-2023-51446

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform L…

Fix: 10.0.12+
Fix from $1,950 2024-02-01
Glpi MEDIUM 6.1
CVE-2024-23645

GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12.

Fix: 10.0.12+
Fix from $1,600 2024-02-01
Glpi CRITICAL 9.8
CVE-2023-46727EPSS 68%

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used…

Fix: 10.0.11+
Fix from $2,300 2023-12-13
Glpi CRITICAL 9.8
CVE-2023-46726

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP 7.4 only, the LDAP server co…

Fix: 10.0.11+
Fix from $2,300 2023-12-13
Glpi HIGH 8.8
CVE-2023-43813EPSS 31%

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be use…

Fix: 10.0.11+
Fix from $1,950 2023-12-13