Glpi-project

Glpi

201 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2023-42462

  • EPSS 1.04%
  • Veröffentlicht 27.09.2023 15:19:32
  • Zuletzt bearbeitet 21.11.2024 08:22:35

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The document upload process can be diverted to delete some ...

5.4

CVE-2023-41888

  • EPSS 0.42%
  • Veröffentlicht 27.09.2023 15:19:31
  • Zuletzt bearbeitet 21.11.2024 08:21:51

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The lack of path filtering on the GLPI URL may allow an att...

9.8

CVE-2023-41320

  • EPSS 31.87%
  • Veröffentlicht 27.09.2023 15:19:29
  • Zuletzt bearbeitet 21.11.2024 08:21:03

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. UI layout preferences management can be hijacked to lead to...

6.5

CVE-2023-41321

  • EPSS 0.74%
  • Veröffentlicht 27.09.2023 15:19:29
  • Zuletzt bearbeitet 21.11.2024 08:21:04

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An API user can enumerate sensitive fields values on resour...

8.8

CVE-2023-41322

  • EPSS 0.73%
  • Veröffentlicht 27.09.2023 15:19:29
  • Zuletzt bearbeitet 21.11.2024 08:21:04

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A user with write access to another user can make requests ...

5.3

CVE-2023-41323

  • EPSS 33.87%
  • Veröffentlicht 27.09.2023 15:19:29
  • Zuletzt bearbeitet 21.11.2024 08:21:04

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can enumerate users logins. Users a...

8.8

CVE-2023-41324

  • EPSS 0.74%
  • Veröffentlicht 27.09.2023 15:19:29
  • Zuletzt bearbeitet 21.11.2024 08:21:04

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An API user that have read access on users resource can ste...

8.8

CVE-2023-41326

  • EPSS 30.95%
  • Veröffentlicht 27.09.2023 15:19:29
  • Zuletzt bearbeitet 21.11.2024 08:21:04

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A logged user from any profile can hijack the Kanban featur...

9.1

CVE-2023-37278

  • EPSS 0.69%
  • Veröffentlicht 13.07.2023 23:15:10
  • Zuletzt bearbeitet 21.11.2024 08:11:22

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An administrator can trigger SQL injection via dashboards administration. This vulnerability has been patched...

9.8

CVE-2023-36808

  • EPSS 47.56%
  • Veröffentlicht 05.07.2023 21:15:10
  • Zuletzt bearbeitet 21.11.2024 08:10:38

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this...