Browse CVEs

HIGH 8.8 CVE-2024-47760 GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access to the A… Glpi 10.0.17+ Fix from $1,9502024-12-11 HIGH 7.2 CVE-2024-47761 GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the s… Glpi 10.0.17+ Fix from $1,9502024-12-11 HIGH 8.8 CVE-2024-47758 GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can use the AP… Glpi 10.0.17+ Fix from $1,9502024-12-11 MEDIUM 5.3 CVE-2024-43416 GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an ap… Glpi 10.0.17+ Fix from $1,6002024-11-18 HIGH 7.5 CVE-2024-38370 GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API wi… Glpi 10.0.16+ Fix from $1,9502024-11-15 MEDIUM 6.1 CVE-2024-45610 GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An… Glpi 10.0.17+ Fix from $1,6002024-11-15 MEDIUM 5.4 CVE-2024-45611 GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An… Glpi 10.0.17+ Fix from $1,6002024-11-15 MEDIUM 6.1 CVE-2024-45609 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unaut… Glpi 10.0.17+ Fix from $1,6002024-11-15 HIGH 8.8 CVE-2024-45608 GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.… Glpi 10.0.17+ Fix from $1,9502024-11-15 HIGH 8.8 CVE-2024-41679 GLPI is a free asset and IT management software package. An authenticated user can exploit a SQL injection vulnerability from the ticket form. Upgrad… Glpi 10.0.17+ Fix from $1,9502024-11-15 MEDIUM 6.1 CVE-2024-43417 GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploi… Glpi 10.0.17+ Fix from $1,6002024-11-15 MEDIUM 6.1 CVE-2024-43418 GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploi… Glpi 10.0.17+ Fix from $1,6002024-11-15 HIGH 8.8 CVE-2024-40638EPSS 37% GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be… Glpi 10.0.17+ Fix from $1,9502024-11-15 MEDIUM 6.1 CVE-2024-41678 GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploi… Glpi 10.0.17+ Fix from $1,6002024-11-15 HIGH 8.8 CVE-2024-37149EPSS 21% GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An… Glpi 10.0.16+ Fix from $1,9502024-07-10 HIGH 8.1 CVE-2024-37148EPSS 20% GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An… Glpi 10.0.16+ Fix from $1,9502024-07-10 HIGH 8.1 CVE-2024-29889EPSS 63% GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the sav… Glpi 10.0.15+ Fix from $1,9502024-05-07 MEDIUM 6.5 CVE-2024-31456EPSS 59% GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability from map s… Glpi 10.0.15+ Fix from $1,6002024-05-07 HIGH 7.8 CVE-2024-28240 The GLPI Agent is a generic management agent. A vulnerability that only affects GLPI-Agent installed on windows via MSI packaging can allow a local u… Glpi Agent 1.7.2+ Fix from $1,9502024-04-25 HIGH 7.8 CVE-2024-28241 The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DLLs to modify agent logic and … Glpi Agent 1.7.2+ Fix from $1,9502024-04-25 MEDIUM 6.1 CVE-2024-27914 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unaut… Glpi 10.0.13+ Fix from $1,6002024-03-18 CRITICAL 9.6 CVE-2024-27098EPSS 36% GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authe… Glpi 10.0.13+ Fix from $2,3002024-03-18 MEDIUM 6.5 CVE-2024-27096EPSS 59% GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authe… Glpi 10.0.13+ Fix from $1,6002024-03-18 MEDIUM 6.5 CVE-2024-27930 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authe… Glpi 10.0.13+ Fix from $1,6002024-03-18 HIGH 8.8 CVE-2024-27756 GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title. Glpi after 10.0.12 Fix from $1,9502024-03-15 HIGH 8.1 CVE-2023-51446 GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform L… Glpi 10.0.12+ Fix from $1,9502024-02-01 MEDIUM 6.1 CVE-2024-23645 GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12. Glpi 10.0.12+ Fix from $1,6002024-02-01 CRITICAL 9.8 CVE-2023-46727EPSS 68% GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used… Glpi 10.0.11+ Fix from $2,3002023-12-13 CRITICAL 9.8 CVE-2023-46726 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP 7.4 only, the LDAP server co… Glpi 10.0.11+ Fix from $2,3002023-12-13 HIGH 8.8 CVE-2023-43813EPSS 31% GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be use… Glpi 10.0.11+ Fix from $1,9502023-12-13