io.apiman:apiman-manager-api-micro (>=1.5.7.final, <=3.0.0.rc6), io.apiman:apiman-manager-api-war (>=1.5.7.final, <=2.0.0.final) +3 more potentially affected by CVE-2022-47551 via io.apiman:apiman-manager-api-rest-impl (>=1.5.7.final, <=3.0.0.rc6)

io.apiman:apiman-manager-api-rest-impl MAVEN version =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =3.0.0.rc6 Source cves: CVE-2022-47551 Source advisory: OSV:GHSA-J94P-HV25-RM5G...

io.apiman:apiman-manager-api-micro (>=1.5.7.final, <=3.0.0.rc6), io.apiman:apiman-manager-api-war (>=1.5.7.final, <=2.0.0.final) +3 more potentially affected by CVE-2022-47551 via io.apiman:apiman-manager-api-rest-impl (>=1.5.7.final, <=3.0.0.rc6)

io.apiman:apiman-manager-api-rest-impl MAVEN version =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =3.0.0.rc6 Source cves: CVE-2022-47551 Source advisory: MEND:CVE-2022-47551...

Sql injection

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

UBUNTU-CVE-2022-39323

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

CVE-2022-39323

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

CVE-2022-39323

GLPI (Gestionnaire Libre de Parc Informatique) is affected by multiple CVEs described for GLPI-related components. CVE-2022-39323 involves a time-based SQL injection in the api REST user_token that can lead to full confidentiality and integrity/availability impact; the initial recommendation is t...

CVE-2022-39323: Improper Neutralization of Special Elements used in an SQL Command

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

CVE-2022-39323 SQL Injection on REST API in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

GLPI SQL injection vulnerability

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

MAL-2022-1629 Malicious code in bluejeans-api-rest-meetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a43e4229bfe7054913dd74a700512a79d803b5d9bad65bd4280562a4f06c7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bluejeans-api-rest-meetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a43e4229bfe7054913dd74a700512a79d803b5d9bad65bd4280562a4f06c7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-44617

A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated...

CVE-2021-39213

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

Design/Logic Flaw

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

CVE-2021-39213

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

CVE-2021-39213

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

CVE-2021-39213: Improper Neutralization of Special Elements in Output Used by a Downstream Component

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

PT-2018-10685

Name of the Vulnerable Software and Affected Versions SearchBlox version 8.6.7 Description A XML external entity XXE issue in the api/rest/status endpoint allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks by sending a crafted DTD in an...

CVE-2018-11586: Improper Restriction of XML External Entity Reference

XML external entity XXE vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...