Lucene search
+L

3050 matches found

OpenVAS
OpenVAS
•added 2011/08/12 12:00 a.m.•25 views

Fedora Update for glpi FEDORA-2011-9639

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.0285EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/08/12 12:00 a.m.•39 views

Fedora Update for glpi FEDORA-2011-9639

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2011-9639 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

5CVSS6.4AI score0.0285EPSS
SaveExploits0References2
NVD
NVD
•added 2011/08/05 9:55 p.m.•21 views

CVE-2011-2720

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

5CVSS6AI score0.0285EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
•added 2011/08/05 9:55 p.m.•23 views

CVE-2011-2720

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

5CVSS5.9AI score0.0285EPSS
SaveExploits0References1
Prion
Prion
•added 2011/08/05 9:55 p.m.•21 views

Design/Logic Flaw

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

5CVSS6.5AI score0.0285EPSS
SaveExploits0References21Affected Software1
Cvelist
Cvelist
•added 2011/08/05 9:00 p.m.•46 views

CVE-2011-2720

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

5.9AI score0.0285EPSS
SaveExploits0References21
CVE
CVE
•added 2011/08/05 9:00 p.m.•76 views

CVE-2011-2720

The CVE-2011-2720 entry concerns GLPI pre-0.80.2 where the autocompletion feature does not blacklist certain username/password fields, allowing a remote attacker to extract sensitive information via a crafted POST request. Affected software: GLPI (prior to 0.80.2). Root cause: input fields used f...

5CVSS6AI score0.0285EPSS
SaveExploits0References21Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/08/05 12:00 a.m.•2 views

CVE-2011-2720: Exposure of Sensitive Information to an Unauthorized Actor

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

5CVSS5.8AI score0.0285EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2011/08/04 12:00 a.m.•36 views

Fedora 15 : glpi-0.78.5-2.svn14966.fc15 (2011-9639)

This update fixes a database information disclosure vulnerability in GLPI Advisory not yet published. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

5CVSS5.4AI score0.0285EPSS
SaveExploits0References3
Fedora
Fedora
•added 2011/08/03 10:56 p.m.•29 views

[SECURITY] Fedora 15 Update: glpi-0.78.5-2.svn14966.fc15

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

5CVSS3AI score0.0285EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2011/07/20 12:00 a.m.•36 views

glpi -- remote attack via crafted POST request

The GLPI project reports: The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

5CVSS6.1AI score0.0285EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2011/07/11 12:00 a.m.•7 views

PT-2011-23: Database information disclosure in GLPI

Positive Research Center has discovered a database information disclosure vulnerability in GLPI. The vulnerability can be exploited with a minimally privileged user account such as "post-only." The vulnerable script is /ajax/autocompletion.php. An authorized user can send a special request to thi...

6.5CVSS7.2AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2011/05/17 12:00 a.m.•19 views

Mandriva Update for glpi-massocsimport MDVA-2011:021 (glpi-massocsimport)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5.3AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/05/17 12:00 a.m.•17 views

Mandriva Update for glpi-massocsimport MDVA-2011:021 (glpi-massocsimport)

Check for the Version of glpi-massocsimport OpenVAS Vulnerability Test Mandriva Update for glpi-massocsimport MDVA-2011:021 glpi-massocsimport Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

7.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/04/22 12:00 a.m.•20 views

Mandriva Update for glpi-data-injection MDVA-2011:015 (glpi-data-injection)

Check for the Version of glpi-data-injection OpenVAS Vulnerability Test Mandriva Update for glpi-data-injection MDVA-2011:015 glpi-data-injection Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

7.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/04/22 12:00 a.m.•47 views

Mandriva Update for glpi-data-injection MDVA-2011:015 (glpi-data-injection)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5.3AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/11/16 12:00 a.m.•23 views

Fedora Update for glpi FEDORA-2010-16912

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2010-16912 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

6.4CVSS6.3AI score0.03626EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/11/16 12:00 a.m.•33 views

Fedora Update for glpi FEDORA-2010-16912

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.4CVSS6.4AI score0.03626EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/11/16 12:00 a.m.•20 views

Fedora Update for glpi FEDORA-2010-16905

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2010-16905 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

6.4CVSS6.3AI score0.03626EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/11/16 12:00 a.m.•35 views

Fedora Update for glpi FEDORA-2010-16905

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.4CVSS6.4AI score0.03626EPSS
SaveExploits0References2
Rows per page
Query Builder