ROS-20250402-04

🗓️ 02 Apr 2025 00:00:00Reported by RedosType

GLPI system vulnerabilities allow remote attackers to access confidential information and exploit systems.

Reporter	Title	Published	Views	Family All 104
Information Security Automation	April Linux Patch Wednesday	30 Apr 202523:34	–	avleonov
BDU FSTEC	The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to incorrect authorization, allows a violator to disclose protected information.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows attackers to carry out attacks using cross-site scripting (XSS).	15 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to incorrect authentication, allows a perpetrator to bypass the authentication process.	15 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.	15 Apr 202500:00	–	bdu_fstec
FreeBSD	glpi-project -- GLPI multiple vulnerabilities	25 Feb 202500:00	–	freebsd
Circl	CVE-2025-21626	25 Feb 202519:03	–	circl
Circl	CVE-2025-21627	25 Feb 202517:03	–	circl
Circl	CVE-2025-23024	25 Feb 202519:03	–	circl