Filter
-Infinity
0
Trending
GLPIGLPI allows unauthorized access to debug mode
6.5
EPSS
0.04%
First published (updated )
GLPIGLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin
7.5
First published (updated )
GLPIGLPI vulnerable to exposure of sensitive information in the `status.php` endpoint
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPIGLPI vulnerable to unauthenticated session hijacking
9.3
First published (updated )
GLPIGLPI vulnerable to authenticated insecure account deletion
8.1
EPSS
0.07%
First published (updated )
GLPIGLPI vulnerable to account takeover via the password reset feature
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPIGLPI vulnerable to account takeover without privilege escalation through the API
8.8
First published (updated )
GLPIGLPI vulnerable to enumeration of users' email addresses by unauthenticated user
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPIGLPI has a Reflected XSS in /front/stat.graph.php
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPIGLPI allows account takeover via SQL Injection in AJAX scripts
8.8
First published (updated )
GLPIGLPI allows remote code execution through the plugin loader
8.8
First published (updated )
GLPIGLPI allows account takeover via SQL Injection in AJAX scripts
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPIGLPI allows Authenticated File Upload to Restricted Tickets
4.3
First published (updated )
GLPIGLPI contains an SQL injection through the saved searches
8.1
First published (updated )
GLPI AgentGlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folder
7.8
First published (updated )
GLPI AgentGLPI-Agent's MSI package installation permits local users to change Agent configuration
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.