Vulnerability index

Browse CVEs

170 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Glpi CRITICAL 9.8
CVE-2023-42802

GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unverified object instantiation …

Fix: 10.0.10+
Fix from $2,300 2023-11-02
Glpi CRITICAL 9.8
CVE-2023-42461

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $2,300 2023-09-27
Glpi CRITICAL 9.1
CVE-2023-42462

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $2,300 2023-09-27
Glpi MEDIUM 5.4
CVE-2023-41888

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $1,600 2023-09-27
Glpi CRITICAL 9.8
CVE-2023-41320EPSS 32%

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $2,300 2023-09-27
Glpi HIGH 8.8
CVE-2023-41322

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $1,950 2023-09-27
Glpi HIGH 8.8
CVE-2023-41324

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $1,950 2023-09-27
Glpi HIGH 8.8
CVE-2023-41326EPSS 31%

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $1,950 2023-09-27
Glpi MEDIUM 6.5
CVE-2023-41321

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $1,600 2023-09-27
Glpi MEDIUM 5.3
CVE-2023-41323EPSS 34%

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,…

Fix: 10.0.10+
Fix from $1,600 2023-09-27
Glpi CRITICAL 9.1
CVE-2023-37278

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An admin…

Fix: 10.0.9+
Fix from $2,300 2023-07-13
Glpi CRITICAL 9.8
CVE-2023-36808EPSS 48%

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI…

Fix: 10.0.8+
Fix from $2,300 2023-07-05
Glpi HIGH 8.1
CVE-2023-35939

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a on a f…

Fix: 10.0.8+
Fix from $1,950 2023-07-05
Glpi HIGH 7.5
CVE-2023-35940

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a file a…

Fix: 10.0.8+
Fix from $1,950 2023-07-05
Glpi CRITICAL 9.8
CVE-2023-35924EPSS 51%

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.8, GLPI inventory endpoint can be used …

Fix: 10.0.8+
Fix from $2,300 2023-07-05
Glpi MEDIUM 6.5
CVE-2023-34107

GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.8 have an incorrect rights ch…

Fix: 10.0.8+
Fix from $1,600 2023-07-05
Glpi MEDIUM 6.1
CVE-2023-34244

GLPI is a free asset and IT management software package. Starting in version 9.4.0 and prior to version 10.0.8, a malicious link can be crafted by an…

Fix: 10.0.8+
Fix from $1,600 2023-07-05
Glpi MEDIUM 6.5
CVE-2023-34106

GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights che…

Fix: 10.0.8+
Fix from $1,600 2023-07-05
Glpi Agent HIGH 7.2
CVE-2023-34254

The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh c…

Fix: 1.5+
Fix from $1,950 2023-06-23
Positions CRITICAL 9.8
CVE-2022-34128EPSS 8%

The Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code execution via PHP code in the POST data to front/upload.php.

Fix: 6.0.1+
Fix from $2,300 2023-04-16
Activity HIGH 7.5
CVE-2022-34126

The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter.

Fix: 3.1.1+
Fix from $1,950 2023-04-16
Manageentities HIGH 7.5
CVE-2022-34127EPSS 7%

The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter.

Fix: 4.0.2+
Fix from $1,950 2023-04-16
Cmdb MEDIUM 6.5
CVE-2022-34125

front/icon.send.php in the CMDB plugin before 3.0.3 for GLPI allows attackers to gain read access to sensitive information via a _log/ pathname in th…

Fix: 3.0.3+
Fix from $1,600 2023-04-16
Order HIGH 8.8
CVE-2023-29006

The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to versions 2.7.7 and 2.10.1, an aut…

Fix: 2.7.7+
Fix from $1,950 2023-04-05
Glpi HIGH 8.1
CVE-2023-28838

GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 9.5.13 and 10.0.7, a SQL Injection vulnerabil…

Fix: 9.5.13 / 10.0.7+
Fix from $1,950 2023-04-05
Glpi MEDIUM 6.1
CVE-2023-28639

GLPI is a free asset and IT management software package. Starting in version 0.85 and prior to versions 9.5.13 and 10.0.7, a malicious link can be cr…

Fix: 9.5.13 / 10.0.7+
Fix from $1,600 2023-04-05
Glpi MEDIUM 5.4
CVE-2023-28849

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.7, GLPI inventory endpoint can be used …

Fix: 10.0.7+
Fix from $1,600 2023-04-05
Glpi HIGH 8.8
CVE-2023-28634

GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.7, a user who has the Technic…

Fix: 9.5.13 / 10.0.7+
Fix from $1,950 2023-04-05
Glpi MEDIUM 5.4
CVE-2023-28633

GLPI is a free asset and IT management software package. Starting in version 0.84 and prior to versions 9.5.13 and 10.0.7, usage of RSS feeds is subj…

Fix: 9.5.13 / 10.0.7+
Fix from $1,600 2023-04-05
Glpi HIGH 8.1
CVE-2023-28632

GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.7, an authenticated user can …

Fix: 9.5.13 / 10.0.7+
Fix from $1,950 2023-04-05