Filter
-Infinity
0
GLPIGLPI allows unauthorized access to debug mode
6.5
EPSS
0.04%
First published (updated )
GLPI Inventory PluginGLPI Inventory plugin has Improper Access Control Vulnerability
8.2
EPSS
0.03%
First published (updated )
GLPIGLPI allows unauthenticated SQL injection through the inventory endpoint
7.5
First published (updated )
GLPIGLPI allows SQL injection through the rules configuration
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPI Inventory PluginGLPI Inventory Plugin vulnerable to reflective Cross-site Scripting
6.5
EPSS
0.04%
First published (updated )
Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)
First published (updated )
Social
redditGLPIGLPI vulnerable to exposure of sensitive information in the `status.php` endpoint
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPIGLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin
7.5
First published (updated )
GLPIGLPI vulnerable to account takeover without privilege escalation through the API
8.8
First published (updated )
GLPIGLPI contains an SQL injection through the saved searches
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GLPIGLPI vulnerable to account takeover via the password reset feature
7.5
First published (updated )
GLPI AgentGLPI-Agent's MSI package installation permits local users to change Agent configuration
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.