Browse CVEs

MEDIUM 6.5 CVE-2023-23610 GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any use… Glpi 9.5.12 / 10.0.6+ Fix from $1,6002023-01-26 HIGH 7.5 CVE-2023-22500 GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6 are vulnerable to Incorrect Authorization. This v… Glpi 10.0.6+ Fix from $1,9502023-01-26 MEDIUM 6.1 CVE-2023-22722 GLPI is a Free Asset and IT Management Software package. Versions 9.4.0 and above, prior to 10.0.6 are subject to Cross-site Scripting. An attacker c… Glpi 9.5.12 / 10.0.6+ Fix from $1,6002023-01-26 MEDIUM 6.1 CVE-2022-39181 GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS). Type 1: Reflected XSS (or Non-Persistent) - The server reads data directly from… Reports Mitigation only Fix from $1,6002022-11-17 MEDIUM 6.5 CVE-2022-39376 GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat… Glpi 10.0.4+ Fix from $1,6002022-11-03 MEDIUM 5.4 CVE-2022-39371 GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat… Glpi 10.0.4+ Fix from $1,6002022-11-03 MEDIUM 5.4 CVE-2022-39372 GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat… Glpi 10.0.4+ Fix from $1,6002022-11-03 MEDIUM 5.4 CVE-2022-39375 GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat… Glpi 10.0.4+ Fix from $1,6002022-11-03 CRITICAL 9.8 CVE-2022-39323EPSS 34% GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat… Glpi 10.0.4+ Fix from $2,3002022-11-03 MEDIUM 5.3 CVE-2022-39276 GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat… Glpi 10.0.4+ Fix from $1,6002022-11-03 HIGH 8.8 CVE-2022-39234 GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk feat… Glpi 10.0.4+ Fix from $1,9502022-11-03 CRITICAL 9.8 CVE-2022-35914 KEVEPSS 100% /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection. Glpi after 10.0.2 Fix from $2,3002022-09-19 CRITICAL 9.8 CVE-2022-35947 GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu… Glpi 10.0.3+ Fix from $2,3002022-09-14 MEDIUM 6.5 CVE-2022-35946 GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu… Glpi 10.0.3+ Fix from $1,6002022-09-14 MEDIUM 6.1 CVE-2022-35945 GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu… Glpi 10.0.3+ Fix from $1,6002022-09-14 MEDIUM 5.8 CVE-2022-36112 GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu… Glpi 10.0.3+ Fix from $1,6002022-09-14 MEDIUM 5.4 CVE-2022-31187 GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu… Glpi 10.0.3+ Fix from $1,6002022-09-14 MEDIUM 5.3 CVE-2022-31143 GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featu… Glpi 10.0.3+ Fix from $1,6002022-09-14 CRITICAL 9.8 CVE-2022-31056EPSS 9% GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affec… Glpi 10.0.2+ Fix from $2,3002022-06-28 CRITICAL 9.8 CVE-2022-31061EPSS 51% GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affec… Glpi 9.5.8 / 10.0.2+ Fix from $2,3002022-06-28 MEDIUM 5.3 CVE-2022-31068 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affec… Glpi 10.0.2+ Fix from $1,6002022-06-28 CRITICAL 9.8 CVE-2022-31082 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inv… Glpi Inventory 1.0.2+ Fix from $2,3002022-06-27 MEDIUM 5.3 CVE-2022-31062EPSS 6% ### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.… Glpi Inventory 1.0.2+ Fix from $1,6002022-06-20 MEDIUM 6.5 CVE-2022-29250 GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versio… Glpi Mitigation only Fix from $1,6002022-06-09 MEDIUM 5.4 CVE-2022-24876 GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is… Glpi Patch available Fix from $1,6002022-06-09 HIGH 7.5 CVE-2022-24867 GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you … Glpi 10.0.0+ Fix from $1,9502022-04-21 MEDIUM 5.4 CVE-2022-24868 GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versio… Glpi 10.0.0+ Fix from $1,6002022-04-21 MEDIUM 5.4 CVE-2022-24869 GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versio… Glpi after 0.90 Fix from $1,6002022-04-21 CRITICAL 9.8 CVE-2021-44617 A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated. Glpi No fix yet Fix from $2,3002022-03-28 MEDIUM 6.1 CVE-2022-21719 GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9… Glpi 9.5.7+ Fix from $1,6002022-01-28