Browse CVEs

CRITICAL 9.8 CVE-2023-42802 GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unverified object instantiation … Glpi 10.0.10+ Fix from $2,3002023-11-02 CRITICAL 9.8 CVE-2023-42461 GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $2,3002023-09-27 CRITICAL 9.1 CVE-2023-42462 GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $2,3002023-09-27 MEDIUM 5.4 CVE-2023-41888 GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $1,6002023-09-27 CRITICAL 9.8 CVE-2023-41320EPSS 32% GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $2,3002023-09-27 HIGH 8.8 CVE-2023-41322 GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $1,9502023-09-27 HIGH 8.8 CVE-2023-41324 GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $1,9502023-09-27 HIGH 8.8 CVE-2023-41326EPSS 31% GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $1,9502023-09-27 MEDIUM 6.5 CVE-2023-41321 GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $1,6002023-09-27 MEDIUM 5.3 CVE-2023-41323EPSS 34% GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,… Glpi 10.0.10+ Fix from $1,6002023-09-27 CRITICAL 9.1 CVE-2023-37278 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An admin… Glpi 10.0.9+ Fix from $2,3002023-07-13 CRITICAL 9.8 CVE-2023-36808EPSS 48% GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI… Glpi 10.0.8+ Fix from $2,3002023-07-05 HIGH 8.1 CVE-2023-35939 GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a on a f… Glpi 10.0.8+ Fix from $1,9502023-07-05 HIGH 7.5 CVE-2023-35940 GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a file a… Glpi 10.0.8+ Fix from $1,9502023-07-05 CRITICAL 9.8 CVE-2023-35924EPSS 51% GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.8, GLPI inventory endpoint can be used … Glpi 10.0.8+ Fix from $2,3002023-07-05 MEDIUM 6.5 CVE-2023-34107 GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.8 have an incorrect rights ch… Glpi 10.0.8+ Fix from $1,6002023-07-05 MEDIUM 6.1 CVE-2023-34244 GLPI is a free asset and IT management software package. Starting in version 9.4.0 and prior to version 10.0.8, a malicious link can be crafted by an… Glpi 10.0.8+ Fix from $1,6002023-07-05 MEDIUM 6.5 CVE-2023-34106 GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights che… Glpi 10.0.8+ Fix from $1,6002023-07-05 HIGH 7.2 CVE-2023-34254 The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh c… Glpi Agent 1.5+ Fix from $1,9502023-06-23 CRITICAL 9.8 CVE-2022-34128EPSS 8% The Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code execution via PHP code in the POST data to front/upload.php. Positions 6.0.1+ Fix from $2,3002023-04-16 HIGH 7.5 CVE-2022-34126 The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter. Activity 3.1.1+ Fix from $1,9502023-04-16 HIGH 7.5 CVE-2022-34127EPSS 7% The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter. Manageentities 4.0.2+ Fix from $1,9502023-04-16 MEDIUM 6.5 CVE-2022-34125 front/icon.send.php in the CMDB plugin before 3.0.3 for GLPI allows attackers to gain read access to sensitive information via a _log/ pathname in th… Cmdb 3.0.3+ Fix from $1,6002023-04-16 HIGH 8.8 CVE-2023-29006 The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to versions 2.7.7 and 2.10.1, an aut… Order 2.7.7+ Fix from $1,9502023-04-05 HIGH 8.1 CVE-2023-28838 GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 9.5.13 and 10.0.7, a SQL Injection vulnerabil… Glpi 9.5.13 / 10.0.7+ Fix from $1,9502023-04-05 MEDIUM 6.1 CVE-2023-28639 GLPI is a free asset and IT management software package. Starting in version 0.85 and prior to versions 9.5.13 and 10.0.7, a malicious link can be cr… Glpi 9.5.13 / 10.0.7+ Fix from $1,6002023-04-05 MEDIUM 5.4 CVE-2023-28849 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.7, GLPI inventory endpoint can be used … Glpi 10.0.7+ Fix from $1,6002023-04-05 HIGH 8.8 CVE-2023-28634 GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.7, a user who has the Technic… Glpi 9.5.13 / 10.0.7+ Fix from $1,9502023-04-05 MEDIUM 5.4 CVE-2023-28633 GLPI is a free asset and IT management software package. Starting in version 0.84 and prior to versions 9.5.13 and 10.0.7, usage of RSS feeds is subj… Glpi 9.5.13 / 10.0.7+ Fix from $1,6002023-04-05 HIGH 8.1 CVE-2023-28632 GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.7, an authenticated user can … Glpi 9.5.13 / 10.0.7+ Fix from $1,9502023-04-05