Lucene search
K

25 matches found

GithubExploit
GithubExploit
added 2026/02/05 10:29 p.m.112 views

diskpulse-poc

diskpulse-poc Exploit for OSED prep on DiskPulse Enter...

5.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/09/03 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-51446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP...

8.1CVSS7.5AI score0.00568EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-23645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12. CVE-2024-23645 Note th...

6.5CVSS6.2AI score0.00583EPSS
Exploits0References2
NVD
NVD
added 2024/03/15 7:15 a.m.10 views

CVE-2024-27756

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title...

8.8CVSS6.7AI score0.00113EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2024/02/01 6:15 p.m.42 views

CVE-2023-51446

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12...

8.1CVSS7.1AI score0.00568EPSS
Exploits0References4
OSV
OSV
added 2024/02/01 6:15 p.m.0 views

UBUNTU-CVE-2024-23645

GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12...

6.5CVSS5.9AI score0.00583EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2024/02/01 6:15 p.m.21 views

CVE-2024-23645

GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12...

6.5CVSS6.5AI score0.00583EPSS
Exploits0References5
CVE
CVE
added 2024/02/01 3:25 p.m.60 views

CVE-2023-51446

GLPI (asset/IT management software) is affected by CVE-2023-51446, where LDAP authentication can be exploited to perform LDAP injection via the authentication form. The available connected sources confirm this issue and indicate the vulnerable condition occurs before the fixed release. The remedi...

8.1CVSS8.3AI score0.00568EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/01 3:25 p.m.17 views

CVE-2023-51446 GLPI LDAP Injection during authentication

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12...

5.9CVSS7.3AI score0.00568EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/02/01 3:24 p.m.34 views

CVE-2024-23645 GLPI reflected XSS in reports pages

GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12...

6.5CVSS6.2AI score0.00583EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/02/01 3:24 p.m.23 views

CVE-2024-23645 GLPI reflected XSS in reports pages

GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12...

6.5CVSS6.8AI score0.00583EPSS
Exploits0References4
FreeBSD
FreeBSD
added 2024/02/01 12:0 a.m.20 views

GLPI -- multiple vulnerabilities

GLPI team reports: GLPI 10.0.12 Changelog SECURITY - moderate Reflected XSS in reports pages CVE-2024-23645 SECURITY - moderate LDAP Injection during authentication CVE-2023-51446...

8.1CVSS7AI score0.00583EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/02/01 12:0 a.m.3 views

PT-2024-19996 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.12 Description: A malicious URL can be used to execute XSS on reports pages. This issue affects GLPI, a Free Asset and IT Management Software package. Recommendations: For versions prior to 10.0.12, upgrade to...

10CVSS7AI score0.94395EPSS
Exploits26References159
Positive Technologies
Positive Technologies
added 2024/02/01 12:0 a.m.5 views

PT-2024-14128 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.12 Description: The issue is related to LDAP injection when authentication is made against a LDAP server. This can be exploited by a remote attacker to perform LDAP injection using the authentication form. The...

10CVSS7.2AI score0.94395EPSS
Exploits26References159
NVD
NVD
added 2023/08/25 9:15 p.m.22 views

CVE-2023-41080

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. Older, EOL versions may als...

6.1CVSS7AI score0.11586EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2021/10/14 12:0 a.m.89 views

Apache Tomcat 10.0.0.M10 < 10.0.12

The version of Tomcat installed on the remote host is prior to 10.0.12. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.0.12security-10 advisory. - The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.5...

7.5CVSS7.2AI score0.04282EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/14 12:0 a.m.14 views

Apache Tomcat < 10.0.12 Vulnerability

Binary data 701372.pasl...

7.5CVSS7.2AI score0.04282EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2017/08/30 12:0 a.m.21 views

Disk Pulse Enterprise Server Buffer Overflow Vulnerability (Aug 2017)

Disk Pulse Enterprise Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2013/01/15 12:0 a.m.35 views

Firefox < 10.0.12 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 10.0.12 and thus, is potentially affected by the following security issues : - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. CVE-2013-0743 - A use-after-free error exists related to displaying HTML tables...

10CVSS7.6AI score0.87365EPSS
Exploits18References26
OpenVAS
OpenVAS
added 2013/01/11 12:0 a.m.38 views

RedHat Update for firefox RHSA-2013:0144-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2013:0144-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

10CVSS0.6AI score0.87365EPSS
Exploits18References2
Rows per page
Query Builder