EUVD-2024-42830

Malicious code in bioql PyPI...

EUVD-2022-29645

Malicious code in bioql PyPI...

GLPI URL Redirection

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the redirection of URLs to an unreliable website during the processing of the redirect parameter. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and...

GLPI Privilege Escalation

The vulnerability of software for asset management and GLPI data centers is related to improper management of privileges. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

Exploit for SQL Injection in Glpi-Project Glpi

CVE-2025-247...

Linux Distros Unpatched Vulnerability : CVE-2024-37147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An...

Linux Distros Unpatched Vulnerability : CVE-2021-39211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemetry endpoint discloses GLPI and server...

Linux Distros Unpatched Vulnerability : CVE-2020-5248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can...

Linux Distros Unpatched Vulnerability : CVE-2024-50339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the...

Linux Distros Unpatched Vulnerability : CVE-2024-27104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights ...

Linux Distros Unpatched Vulnerability : CVE-2024-45610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An...

GLPI SSRF

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to carry out an SSRF attack...

Linux Distros Unpatched Vulnerability : CVE-2024-28241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DLLs to modify agent logic and even gain...

Linux Distros Unpatched Vulnerability : CVE-2023-34254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh command, an...

Linux Distros Unpatched Vulnerability : CVE-2019-10231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword...

Linux Distros Unpatched Vulnerability : CVE-2022-35946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licens...

Linux Distros Unpatched Vulnerability : CVE-2015-7685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the profilesid parameter to...

Linux Distros Unpatched Vulnerability : CVE-2024-11955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GLPI up to 10.0.17. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file...

Linux Distros Unpatched Vulnerability : CVE-2025-25192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2022-35947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licens...