Lucene search
K

64 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-31082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inventory-plug...

9.8CVSS8.2AI score0.00942EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/05 12:0 a.m.3 views

glpi-inventory-plugin 安全漏洞

glpi-inventory-plugin is a GLPI open source GLPI inventory plugin. A security vulnerability exists in glpi-inventory-plugin versions prior to 2.0.2, which stems from a file disclosure vulnerability in the /ajax/screenshot.php endpoint...

7.7CVSS6.4AI score0.00261EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/03/27 2:32 p.m.7 views

CVE-2025-27147

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS7AI score0.00408EPSS
Exploits0References1
Metasploit
Metasploit
added 2025/03/26 6:50 p.m.819 views

GLPI Inventory Plugin Unauthenticated Blind Boolean SQLi

GLPI use auxiliary/gather/glpiinventorypluginunauthsqli msf auxiliaryglpiinventorypluginunauthsqli show actions ...actions... msf auxiliaryglpiinventorypluginunauthsqli set ACTION msf auxiliaryglpiinventorypluginunauthsqli show options ...show and set options... msf...

9.8CVSS6.4AI score0.86182EPSS
Exploits5
NVD
NVD
added 2025/03/25 3:15 p.m.13 views

CVE-2025-27147

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS0.00408EPSS
Exploits0References2
CVE
CVE
added 2025/03/25 2:26 p.m.73 views

CVE-2025-27147

The CVE-2025-27147 issue affects the GLPI Inventory Plugin used with GLPI, where versions prior to 1.5.0 contain an improper access control vulnerability. Reported details across connected sources consistently point to an access-control weakness in GLPI Inventory Plugin tasks (network discovery, ...

8.2CVSS7.2AI score0.00408EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/25 2:26 p.m.13 views

CVE-2025-27147 GLPI Inventory plugin has Improper Access Control Vulnerability

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS7.2AI score0.00408EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/25 2:26 p.m.25 views

CVE-2025-27147 GLPI Inventory plugin has Improper Access Control Vulnerability

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS0.00408EPSS
Exploits0References2
OSV
OSV
added 2025/03/25 2:26 p.m.8 views

CVE-2025-27147 GLPI Inventory plugin has Improper Access Control Vulnerability

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS6.8AI score0.00408EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/03/25 12:0 a.m.3 views

GLPI Inventory Plugin 安全漏洞

GLPI Inventory Plugin is an open source plugin for GLPI France. It is used to handle various types of tasks for GLPI agents. A security vulnerability exists in GLPI Inventory Plugin versions prior to 1.5.0 that stems from improper access control...

8.2CVSS6.5AI score0.00408EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/03/25 12:0 a.m.3 views

PT-2025-12806 · Glpi +1 · Glpi Inventory Plugin +1

Name of the Vulnerable Software and Affected Versions: GLPI Inventory Plugin versions prior to 1.5.0 Description: The GLPI Inventory Plugin handles various tasks for GLPI agents, including network discovery and inventory, software deployment, and data collection. It has an improper access control...

8.2CVSS6.4AI score0.00408EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2025/03/16 1:16 p.m.23 views

CVE-2025-26626

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

6.5CVSS6.9AI score0.00316EPSS
Exploits0References1
NVD
NVD
added 2025/03/14 1:15 p.m.12 views

CVE-2025-26626

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

6.5CVSS0.00316EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/14 12:47 p.m.7 views

CVE-2025-26626 GLPI Inventory Plugin vulnerable to reflective Cross-site Scripting

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

6.5CVSS6.4AI score0.00316EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/14 12:47 p.m.18 views

CVE-2025-26626 GLPI Inventory Plugin vulnerable to reflective Cross-site Scripting

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

6.5CVSS0.00316EPSS
Exploits0References2
CVE
CVE
added 2025/03/14 12:47 p.m.61 views

CVE-2025-26626

GLPI Inventory Plugin (for GLPI) is affected by a reflective cross-site scripting vulnerability in versions prior to 1.5.0. The issue allows execution of JavaScript code and is tracked as CVE-2025-26626. A fixed release is 1.5.0. The CVSSv3.1 base score is 6.5 (MEDIUM), with network attack vector...

6.5CVSS6.4AI score0.00316EPSS
Exploits0References2
OSV
OSV
added 2025/03/14 12:47 p.m.3 views

CVE-2025-26626 GLPI Inventory Plugin vulnerable to reflective Cross-site Scripting

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

6.5CVSS6.8AI score0.00316EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.3 views

GLPI Inventory Plugin 跨站脚本漏洞

GLPI Inventory Plugin is an open source plugin for GLPI France. It is used to handle various types of tasks for GLPI agents. A cross-site scripting vulnerability exists in GLPI Inventory Plugin versions prior to 1.5.0, which stems from reflective cross-site scripting and could lead to the executi...

6.5CVSS6.2AI score0.00316EPSS
Exploits0References4
OSV
OSV
added 2022/06/27 9:15 p.m.3 views

UBUNTU-CVE-2022-31082

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inventory-plugin is a plugin for GLPI to handle inventory management. In affected versions a SQL injection can be made using package deployment tasks...

9.8CVSS5.8AI score0.00942EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/06/20 12:0 a.m.6 views

GLPI Inventory Plugin 路径遍历漏洞

GLPI Inventory Plugin is a French GLPI open source plugin . It is used to handle various types of tasks for GLPI agents. A path traversal vulnerability exists in versions prior to GLPI Inventory Plugin 1.0.2, which stems from a public script that can be used to read the contents of system files...

5.3CVSS5.8AI score0.05497EPSS
Exploits3References5
Rows per page
Query Builder