EUVD-2022-37143

Malicious code in bioql PyPI...

EUVD-2024-41686

Malicious code in bioql PyPI...

EUVD-2023-32468

Malicious code in bioql PyPI...

EUVD-2022-41805

Malicious code in bioql PyPI...

EUVD-2024-53434

Malicious code in bioql PyPI...

EUVD-2021-8672

Malicious code in bioql PyPI...

EUVD-2021-8664

Malicious code in bioql PyPI...

EUVD-2023-45833

Malicious code in bioql PyPI...

The vulnerability of the GLPI system’s request, incident, and inventory management functions lies in the redirection of URLs to an unreliable website when processing the redirect parameter. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the redirection of URLs to an unreliable website during the processing of the redirect parameter. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and...

Vulnerability of software for asset management and GLPI data processing centers, related to improper management of privileges, allowing attackers to escalate their privileges

The vulnerability of software for asset management and GLPI data centers is related to improper management of privileges. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

Exploit for SQL Injection in Glpi-Project Glpi

CVE-2025-247...

Linux Distros Unpatched Vulnerability : CVE-2024-41678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflect...

Linux Distros Unpatched Vulnerability : CVE-2025-21626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive informatio...

Linux Distros Unpatched Vulnerability : CVE-2016-7508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when...

Linux Distros Unpatched Vulnerability : CVE-2025-25192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2020-5248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can...

Linux Distros Unpatched Vulnerability : CVE-2024-37147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An...

Linux Distros Unpatched Vulnerability : CVE-2024-47760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access to the API can take...

Linux Distros Unpatched Vulnerability : CVE-2022-29250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to...

Linux Distros Unpatched Vulnerability : CVE-2023-22722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package. Versions 9.4.0 and above, prior to 10.0.6 are subject to Cross-site Scripting. An attacker can persuade...