glpi-project Vulnerability Advisory Catalog

Total 204 security vulnerabilities recorded for glpi-project software and firmware.

← Back to All Vendors
Component: glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versio...

📅 2025-07-29
CVSS 4.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI s...

📅 2025-03-18
CVSS 8.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vuln...

📅 2025-03-18
CVSS 7.5 Dossier →
CVE-2025-21619 CRITICAL
Component: glpi

GLPI is a free asset and IT management software package. An administrator user can perfom a SQL injection through the rules configuration forms. This ...

📅 2025-03-18
CVSS 9.8 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive in...

📅 2025-02-25
CVSS 6.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication pr...

📅 2025-02-25
CVSS 7.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 0.72 and prior to version 10.0.18, an anonymous user can disable all the ...

📅 2025-02-25
CVSS 4.3 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. In versions prior to 10.0.18, a malicious link can be crafted to perform a reflected XSS atta...

📅 2025-02-25
CVSS 6.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive ...

📅 2025-02-25
CVSS 5.8 Dossier →
Component: glpi

A vulnerability was found in GLPI up to 10.0.17. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of th...

📅 2025-02-25
CVSS 4.3 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve ...

📅 2024-12-12
CVSS 5.3 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.17, an authenticated user can use an app...

📅 2024-12-11
CVSS 8.1 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the se...

📅 2024-12-11
CVSS 7.2 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access to the AP...

📅 2024-12-11
CVSS 8.8 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can use the API...

📅 2024-12-11
CVSS 8.8 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an app...

📅 2024-11-18
CVSS 7.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API wit...

📅 2024-11-15
CVSS 5.3 Dossier →
Component: glpi

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An ...

📅 2024-11-15
CVSS 5.7 Dossier →
Component: glpi

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An ...

📅 2024-11-15
CVSS 6.5 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauth...

📅 2024-11-15
CVSS 6.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.0...

📅 2024-11-15
CVSS 6.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit...

📅 2024-11-15
CVSS 6.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit...

📅 2024-11-15
CVSS 6.5 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. An authenticated user can exploit a SQL injection vulnerability from the ticket form. Upgrade...

📅 2024-11-15
CVSS 6.5 Dossier →
Page 2 of 9 (204 Total Records)