glpi-project Vulnerability Advisory Catalog

Total 204 security vulnerabilities recorded for glpi-project software and firmware.

← Back to All Vendors
CVE-2022-35914 CRITICAL
Component: glpi

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection....

📅 2022-09-19
CVSS 9.8 Dossier →
Component: glpi

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featur...

📅 2022-09-14
CVSS 3.5 Dossier →
CVE-2022-35947 CRITICAL
Component: glpi

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featur...

📅 2022-09-14
CVSS 10.0 Dossier →
Component: glpi

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featur...

📅 2022-09-14
CVSS 5.5 Dossier →
Component: glpi

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featur...

📅 2022-09-14
CVSS 6.3 Dossier →
Component: glpi

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featur...

📅 2022-09-14
CVSS 6.8 Dossier →
Component: glpi

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk featur...

📅 2022-09-14
CVSS 5.3 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affect...

📅 2022-06-28
CVSS 5.3 Dossier →
CVE-2022-31061 CRITICAL
Component: glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affect...

📅 2022-06-28
CVSS 9.8 Dossier →
CVE-2022-31056 CRITICAL
Component: glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affect...

📅 2022-06-28
CVSS 9.8 Dossier →
Component: glpi_inventory

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inve...

📅 2022-06-27
CVSS 5.8 Dossier →
Component: glpi_inventory

### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.p...

📅 2022-06-20
CVSS 5.3 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In version...

📅 2022-06-09
CVSS 8.1 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is ...

📅 2022-06-09
CVSS 5.4 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In version...

📅 2022-04-21
CVSS 4.6 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In version...

📅 2022-04-21
CVSS 7.3 Dossier →
Component: glpi

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you p...

📅 2022-04-21
CVSS 7.5 Dossier →
CVE-2021-44617 CRITICAL
Component: glpi

A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated....

📅 2022-03-28
CVSS 9.8 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. Prior to version 9.5.7, an entity administrator is capable of retrieving normally inaccessibl...

📅 2022-01-28
CVSS 4.9 Dossier →
Component: glpi

GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9....

📅 2022-01-28
CVSS 6.1 Dossier →
CVE-2021-43778 CRITICAL
Component: barcode

Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are v...

📅 2021-11-24
CVSS 9.1 Dossier →
Component: glpi

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable ...

📅 2021-09-15
CVSS 6.8 Dossier →
Component: glpi

GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemetry endpoint discloses GLPI and...

📅 2021-09-15
CVSS 5.3 Dossier →
Component: glpi

GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, the cookie used to store the autologin cookie (when a user uses t...

📅 2021-09-15
CVSS 6.5 Dossier →
Page 6 of 9 (204 Total Records)