glpi-project Vulnerability Advisory Catalog

Total 204 security vulnerabilities recorded for glpi-project software and firmware.

← Back to All Vendors
Component: glpi

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can expor...

📅 2026-05-19
CVSS 4.3 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection v...

📅 2026-04-06
CVSS 7.2 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated time-based blind SQL injection exists in GLP...

📅 2026-04-06
CVSS 8.1 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload through the in...

📅 2026-04-06
CVSS 7.5 Dossier →
CVE-2026-26026 CRITICAL
Component: glpi

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulner...

📅 2026-04-06
CVSS 9.1 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a s...

📅 2026-04-06
CVSS 7.2 Dossier →
Component: glpi_inventory

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, non sanitize...

📅 2026-03-18
CVSS 7.1 Dossier →
Component: glpi_inventory

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, there is a r...

📅 2026-03-03
CVSS 4.5 Dossier →
Component: more_reporting

mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4....

📅 2026-02-12
CVSS 4.9 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authenticatio...

📅 2026-02-04
CVSS 4.3 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. From version 11.0.0 to before 11.0.5, a GLPI administrator can perform SSRF request through t...

📅 2026-02-04
CVSS 4.1 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This ...

📅 2026-02-04
CVSS 6.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. From 11.0.0, < 11.0.3, an unauthenticated user can perform a SQL injection through the invent...

📅 2026-01-15
CVSS 7.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any i...

📅 2026-01-15
CVSS 7.5 Dossier →
Component: glpi

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. At...

📅 2025-12-18
CVSS 5.3 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API acce...

📅 2025-12-16
CVSS 6.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an...

📅 2025-12-16
CVSS 6.5 Dossier →
Component: glpi

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk fe...

📅 2025-07-30
CVSS 5.4 Dossier →
Component: glpi

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk fe...

📅 2025-07-30
CVSS 2.7 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In version...

📅 2025-07-30
CVSS 4.3 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized acce...

📅 2025-07-30
CVSS 6.5 Dossier →
Component: glpi

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, ...

📅 2025-07-30
CVSS 6.5 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package. In versions 9.1.0 through 10.0.18, an unauthenticated user can send a malicious link to attem...

📅 2025-07-30
CVSS 6.5 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versio...

📅 2025-07-30
CVSS 3.5 Dossier →
Page 1 of 9 (204 Total Records)