Filters
Versions
10.0.0
27
0.65
9
0.70
9
0.68
7
0.80
7
0.83
7
0.68.1
6
0.78
6
0.78.1
6
0.78.2
6
0.78.3
6
0.78.4
6
0.78.5
6
0.80.1
6
9.5.0
6
0.42
5
0.5
5
0.5-rc1
5
0.5-rc2
5
0.51
5
0.51a
5
0.6
5
0.6-rc1
5
0.6-rc2
5
0.6-rc3
5
0.65-rc1
5
0.65-rc2
5
0.68-rc1
5
0.68-rc2
5
0.68-rc3
5
0.68.2
5
0.68.3
5
0.70-rc1
5
0.70-rc2
5
0.70-rc3
5
0.70.1
5
0.70.2
5
0.71
5
0.71.1
5
0.71.1-rc1
5
0.71.1-rc2
5
0.71.1-rc3
5
0.71.2
5
0.71.3
5
0.71.4
5
0.71.5
5
0.71.6
5
0.72
5
0.72-rc1
5
0.72-rc2
5
0.72-rc3
5
0.72.1
5
0.72.2
5
0.72.3
5
0.72.4
5
0.80.2
5
0.80.3
5
0.80.4
5
0.80.5
5
0.80.6
5
0.80.61
5
0.83.1
5
0.83.2
5
0.20
4
0.21
4
0.30
4
0.31
4
0.40
4
0.41
4
0.80.7
4
0.83.3
4
0.83.7
4
9.1
4
9.3.0
4
0.60
3
0.83.31
3
0.83.4
3
0.83.5
3
0.83.6
3
0.83.8
3
0.90.4
3
9.1.4
3
9.4.0
3
0.83.9
2
0.84
2
0.85
2
0.85.2
2
10.0.0-beta
2
10.0.0-rc1
2
10.0.0-rc2
2
10.0.0-rc3
2
9.1.5.0
2
9.2.0
2
9.2.1
2
9.3.1
2
0.50
1
0.83.91
1
0.84.1
1
0.84.6
1
0.84.7
1
0.90
1
10.0.2
1
10.0.7
1
10.0.8
1
9.1.0
1
9.1.1
1
9.2
1
9.3.3
1
9.4.1.1
1
9.4.3
1
9.4.5
1
9.4.6
1
9.5.3
1
9.5.4
1
GLPI-PROJECT GLPIGLPI LDAP Injection during authentication
8.1
EPSS
0.06%
First published (updated )
GLPI-PROJECT GLPIGLPI reflected XSS in reports pages
6.5
EPSS
0.05%
First published (updated )
GLPI-PROJECT GLPIGLPI SQL injection through inventory agent request
9.8
First published (updated )
GLPI-PROJECT GLPIGLPI Remote code execution from LDAP server configuration form on PHP 7.4
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIGLPI vulnerable to unallowed PHP script execution
10
First published (updated )
GLPI-PROJECT GLPIFile deletion through document upload process in GLPI
9.1
First published (updated )
GLPI-PROJECT GLPISQL injection in ITIL actors in GLPI
9.8
First published (updated )
GLPI-PROJECT GLPIPhishing through a login page malicious URL in GLPI
5.4
First published (updated )
GLPI-PROJECT GLPIAccount takeover via Kanban feature in GLPI
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIAccount takeover through API in GLPI
8.8
First published (updated )
GLPI-PROJECT GLPIUsers login enumeration by unauthenticated user in GLPI
5.3
First published (updated )
GLPI-PROJECT GLPIPrivilege Escalation from technician to super-admin in GLPI
8.8
First published (updated )
GLPI-PROJECT GLPISensitive fields enumeration through API in GLPI
6.5
First published (updated )
GLPI-PROJECT GLPIAccount takeover via SQL Injection in UI layout preferences in GLPI
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIGLPI vulnerable to SQL injection via dashboard administration
9.1
First published (updated )
GLPI-PROJECT GLPIGLPI vulnerable to SQL injection through Computer Virtual Machine information
9.8
First published (updated )
GLPI-PROJECT GLPIGLPI vulnerable to unauthenticated access to Dashboard data
7.5
First published (updated )
GLPI-PROJECT GLPIGLPI vulnerable to unauthorized access to Dashboard data
8.1
First published (updated )
GLPI-PROJECT GLPIGLPI vulnerable to SQL injection via inventory agent request
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIGLPI vulnerable to reflected XSS in search pages
6.5
First published (updated )
GLPI-PROJECT GLPIGLPI vulnerable to unauthorized access to KnowbaseItem data
6.5
First published (updated )
GLPI-PROJECT GLPIGLPI vulnerable to unauthorized access to User data
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIGLPI vulnerable to stored Cross-site Scripting through dashboard administration
4.8
First published (updated )
GLPI-PROJECT GLPIGLPI vulnerable to SQL injection and Stored XSS via inventory agent request
10
First published (updated )
GLPI-PROJECT GLPIGLPI vulnerable to SQL injection through dynamic reports
9.6
First published (updated )
GLPI-PROJECT GLPIGLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versi…
8.8
First published (updated )
GLPI-PROJECT GLPICVE-2023-28633
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIGLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versi…
8.1
First published (updated )
GLPI-PROJECT GLPIglpi contains XSS Stored inside Standard Interface Help Link href attribute
6.2
First published (updated )
GLPI-PROJECT GLPIglpi Unauthorized access to inventory files
7.5
First published (updated )
GLPI-PROJECT GLPIglpi subject to Cross-site Scripting (XSS) - Reflected
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIglpi contains XSS in RSS Description Link
6.2
First published (updated )
GLPI-PROJECT GLPIglpi vulnerable to XSS on external links
6.2
First published (updated )
GLPI-PROJECT GLPIStored Cross-Site Scripting (XSS) on login page in GLPI
5.2
First published (updated )
GLPI-PROJECT GLPIStored Cross-Site Scripting (XSS) in entity name in GLPI
4.9
First published (updated )
GLPI-PROJECT GLPIStored Cross-Site Scripting (XSS) in user information in GLPI
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIuser session persists even after permanently deleting account in GLPI
8.8
First published (updated )
GLPI-PROJECT GLPIBlind Server-Side Request Forgery (SSRF) in RSS feeds and planning
5.3
First published (updated )
GLPI-PROJECT GLPICross-Site Scripting (XSS) through public RSS feed in GLPI
5.4
First published (updated )
GLPI-PROJECT GLPISQL Injection on REST API in GLPI
9.8
First published (updated )
GLPI-PROJECT GLPICross-Site Scripting (XSS) in external links in GLPI
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI-PROJECT GLPIStored Cross-Site Scripting (XSS) through asset inventory in GLPI
7.5
First published (updated )
GLPI-PROJECT GLPIImproper input validation on emails links in GLPI
6.5
First published (updated )
GLPI-PROJECT GLPIImproper access to debug panel in GLPI
4.3
First published (updated )
GLPI-PROJECT GLPITeclib GLPI Remote Code Execution Vulnerability
First published (updated )
GLPI-PROJECT GLPIStored Cross Site Scripting (XSS) through global search in GLPI
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.