Vulnerability index

Browse CVEs

170 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Glpi MEDIUM 6.5
CVE-2023-23610

GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any use…

Fix: 9.5.12 / 10.0.6+
Fix from $1,600 2023-01-26
Glpi HIGH 7.5
CVE-2023-22500

GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6 are vulnerable to Incorrect Authorization. This v…

Fix: 10.0.6+
Fix from $1,950 2023-01-26
Glpi MEDIUM 6.1
CVE-2023-22722

GLPI is a Free Asset and IT Management Software package. Versions 9.4.0 and above, prior to 10.0.6 are subject to Cross-site Scripting. An attacker c…

Fix: 9.5.12 / 10.0.6+
Fix from $1,600 2023-01-26
Reports MEDIUM 6.1
CVE-2022-39181

GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS). Type 1: Reflected XSS (or Non-Persistent) - The server reads data directly from…

Mitigation only
Fix from $1,600 2022-11-17
Glpi MEDIUM 6.5
CVE-2022-39376

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat…

Fix: 10.0.4+
Fix from $1,600 2022-11-03
Glpi MEDIUM 5.4
CVE-2022-39371

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat…

Fix: 10.0.4+
Fix from $1,600 2022-11-03
Glpi MEDIUM 5.4
CVE-2022-39372

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat…

Fix: 10.0.4+
Fix from $1,600 2022-11-03
Glpi MEDIUM 5.4
CVE-2022-39375

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat…

Fix: 10.0.4+
Fix from $1,600 2022-11-03
Glpi CRITICAL 9.8
CVE-2022-39323EPSS 34%

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat…

Fix: 10.0.4+
Fix from $2,300 2022-11-03
Glpi MEDIUM 5.3
CVE-2022-39276

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat…

Fix: 10.0.4+
Fix from $1,600 2022-11-03
Glpi HIGH 8.8
CVE-2022-39234

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat…

Fix: 10.0.4+
Fix from $1,950 2022-11-03
Glpi CRITICAL 9.8
CVE-2022-35914 KEVEPSS 100%

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

Fix: after 10.0.2
Fix from $2,300 2022-09-19
Glpi CRITICAL 9.8
CVE-2022-35947

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu…

Fix: 10.0.3+
Fix from $2,300 2022-09-14
Glpi MEDIUM 6.5
CVE-2022-35946

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu…

Fix: 10.0.3+
Fix from $1,600 2022-09-14
Glpi MEDIUM 6.1
CVE-2022-35945

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu…

Fix: 10.0.3+
Fix from $1,600 2022-09-14
Glpi MEDIUM 5.8
CVE-2022-36112

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu…

Fix: 10.0.3+
Fix from $1,600 2022-09-14
Glpi MEDIUM 5.4
CVE-2022-31187

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu…

Fix: 10.0.3+
Fix from $1,600 2022-09-14
Glpi MEDIUM 5.3
CVE-2022-31143

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu…

Fix: 10.0.3+
Fix from $1,600 2022-09-14
Glpi CRITICAL 9.8
CVE-2022-31056EPSS 9%

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affec…

Fix: 10.0.2+
Fix from $2,300 2022-06-28
Glpi CRITICAL 9.8
CVE-2022-31061EPSS 51%

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affec…

Fix: 9.5.8 / 10.0.2+
Fix from $2,300 2022-06-28
Glpi MEDIUM 5.3
CVE-2022-31068

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affec…

Fix: 10.0.2+
Fix from $1,600 2022-06-28
Glpi Inventory CRITICAL 9.8
CVE-2022-31082

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inv…

Fix: 1.0.2+
Fix from $2,300 2022-06-27
Glpi Inventory MEDIUM 5.3
CVE-2022-31062EPSS 6%

### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.…

Fix: 1.0.2+
Fix from $1,600 2022-06-20
Glpi MEDIUM 6.5
CVE-2022-29250

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versio…

Mitigation only
Fix from $1,600 2022-06-09
Glpi MEDIUM 5.4
CVE-2022-24876

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is…

Patch available
Fix from $1,600 2022-06-09
Glpi HIGH 7.5
CVE-2022-24867

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you …

Fix: 10.0.0+
Fix from $1,950 2022-04-21
Glpi MEDIUM 5.4
CVE-2022-24868

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versio…

Fix: 10.0.0+
Fix from $1,600 2022-04-21
Glpi MEDIUM 5.4
CVE-2022-24869

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versio…

Fix: after 0.90
Fix from $1,600 2022-04-21
Glpi CRITICAL 9.8
CVE-2021-44617

A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated.

No fix yet
Fix from $2,300 2022-03-28
Glpi MEDIUM 6.1
CVE-2022-21719

GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9…

Fix: 9.5.7+
Fix from $1,600 2022-01-28