59 matches found
ROS-20260417-73-0009
Vulnerability in glpi-plugin-mreporting related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-22821
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821 mreporting affected by a SQLI on date change
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821 mreporting affected by a SQLI on date change
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821
CVE-2026-22821 affects the GLPI mreporting plugin (prior to 1.9.4). The vulnerability is an SQL injection triggered by a date change in mreporting, with potential impact to confidentiality (HIGH) and no impact to integrity/availability per the provided metrics. Upgrading to version 1.9.4 fixes th...
CVE-2026-22821 mreporting affected by a SQLI on date change
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
PT-2026-7885
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2025-65035 GLPI Database Inventory Plugin Vulnerable to Stored Object Injection
pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions database write access must first be obtained through another vulnerability or misconfiguration...
CVE-2025-65035 GLPI Database Inventory Plugin Vulnerable to Stored Object Injection
pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions database write access must first be obtained through another vulnerability or misconfiguration...
CVE-2025-53360
pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. In versions prior to 1.0.3, any authenticated user could send requests to agents. This issue has been patched in version 1.0.3...
EUVD-2021-17081
Malware in sbrugna...
EUVD-2019-2281
Malware in sbrugna...
EUVD-2019-4125
Malware in sbrugna...
EUVD-2022-41726
Malicious code in bioql PyPI...
EUVD-2023-32479
Malicious code in bioql PyPI...
EUVD-2024-41268
Malicious code in bioql PyPI...
EUVD-2025-23571
Malicious code in bioql PyPI...
EUVD-2025-19663
Malicious code in bioql PyPI...
EUVD-2023-32621
Malicious code in bioql PyPI...