Lucene search
K

23 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/09 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-22044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has...

8.8CVSS5.8AI score0.00051EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/05 7:23 p.m.8 views

CVE-2026-22044

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23...

8.8CVSS5.6AI score0.00051EPSS
Exploits0References1
NVD
NVD
added 2026/02/04 6:16 p.m.3 views

CVE-2026-22044

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23...

8.8CVSS0.00051EPSS
Exploits0References2
OSV
OSV
added 2026/02/04 6:16 p.m.5 views

UBUNTU-CVE-2026-22044

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23...

8.8CVSS5.8AI score0.00051EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/02/04 5:15 p.m.23 views

CVE-2026-22044 GLPI is Vulnerable to Authenticated SQL Injection

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23...

6.5CVSS0.00051EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/04 5:15 p.m.3 views

CVE-2026-22044 GLPI is Vulnerable to Authenticated SQL Injection

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23...

6.5CVSS5.6AI score0.00051EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.3 views

GLPI SQL注入漏洞

GLPI is an open-source IT and asset management software developed by GLPI. This software provides a comprehensive IT resource management interface, allowing you to create databases for managing various IT assets such as computers, monitors, servers, printers, network devices, telephones, and even...

8.8CVSS6AI score0.00051EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-6613

Malware in sbrugna...

10CVSS6.4AI score0.04734EPSS
Exploits1References4
OSV
OSV
added 2025/02/06 6:15 a.m.1 views

CVE-2025-0522

The LikeBot WordPress plugin through 0.85 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

4.7CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2025/02/06 12:0 a.m.1 views

WordPress plugin LikeBot 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.7CVSS8.7AI score0.00142EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/07/10 12:0 a.m.0 views

GLPI Security Vulnerabilities

GLPI is an open source IT and asset management software from an individual developer. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and i...

4.3CVSS6.7AI score0.13049EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/07/10 12:0 a.m.1 views

GLPI Security Vulnerabilities

GLPI is an open source IT and asset management software from an individual developer. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and i...

8.8CVSS7AI score0.08328EPSS
Exploits0References3
NVD
NVD
added 2023/04/05 6:15 p.m.12 views

CVE-2023-28639

GLPI is a free asset and IT management software package. Starting in version 0.85 and prior to versions 9.5.13 and 10.0.7, a malicious link can be crafted by an unauthenticated user. It will be able to exploit a reflected XSS in case any authenticated user opens the crafted link. This issue is...

6.1CVSS5.8AI score0.02741EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/04/05 12:0 a.m.3 views

PT-2023-3264 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions 0.85 through 9.5.12 GLPI versions 10.0.0 through 10.0.6 Description: The issue is related to insufficient user data sanitization on search pages, allowing an attacker to craft a malicious link that can exploit a reflected XSS wh...

10CVSS6.2AI score0.94395EPSS
Exploits39References206
Packet Storm
Packet Storm
added 2015/02/18 12:0 a.m.51 views

GLPI 0.85.2 Shell Upload / Privilege Escalation

Multiple vulnerabilities have been identified in GLPI http://www.glpi-project.org. 1/ Arbitrary file upload Severity: Important Versions Affected =========== All versions between 0.85 and 0.85.2 Description ======= When an user wants to create a new ticket, he has the possibility to add an...

0.7AI score
Exploits0
0day.today
0day.today
added 2014/12/18 12:0 a.m.68 views

GLPI 0.85 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: GLPI 0.85 Blind SQL Injection Date: 28-11-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://forge.indepnet.net/attachments/download/1899/glpi-0.85.tar.gz CVE:...

6.5CVSS0.2AI score0.09123EPSS
Exploits4
exploitpack
exploitpack
added 2014/12/15 12:0 a.m.32 views

GLPI 0.85 - Blind SQL Injection

GLPI 0.85 - Blind SQL Injection Exploit Title: GLPI 0.85 Blind SQL Injection Date: 28-11-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://forge.indepnet.net/attachments/download/1899/glpi-0.85.tar.gz CVE: CVE-2014-9258 Category...

6.5CVSS0.2AI score0.09123EPSS
Exploits4
Exploit DB
Exploit DB
added 2014/12/15 12:0 a.m.50 views

GLPI 0.85 - Blind SQL Injection

Exploit Title: GLPI 0.85 Blind SQL Injection Date: 28-11-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://forge.indepnet.net/attachments/download/1899/glpi-0.85.tar.gz CVE: CVE-2014-9258 Category: webapps 1. Description...

6.5CVSS6.4AI score0.09123EPSS
Exploits4
NVD
NVD
added 2012/05/18 10:55 p.m.10 views

CVE-2012-2322

Integer overflow in the dhcpv6getoption function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to cause a denial of service infinite loop and crash via an invalid length value in a DHCP packet...

5CVSS6.7AI score0.01922EPSS
Exploits0References11
OSV
OSV
added 2012/05/18 10:55 p.m.3 views

DEBIAN-CVE-2012-2321

The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 host name or 2 domain name in a DHCP reply...

10CVSS7.8AI score0.03492EPSS
Exploits0References1
Rows per page
Query Builder