io.apiman:apiman-manager-api-micro (>=3.0.0.rc6, <=3.1.0.rc6), io.apiman:apiman-manager-test-api (>=3.0.0.rc6, <=3.1.0.rc6) +1 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (>=3.0.0.rc6, <=3.1.0.rc6)

io.apiman:apiman-manager-api-rest-impl MAVEN version =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.1.0.rc6 Source cves: CVE-2023-28640 Source advisory: OSV:GHSA-M6F8-HJRV-MW5F...

io.apiman:apiman-manager-api-micro (>=1.5.7.final, <=2.2.3.final), io.apiman:apiman-manager-api-war (>=1.5.7.final, <=2.0.0.final) +3 more potentially affected by CVE-2022-47551 via io.apiman:apiman-manager-api-rest-impl (>=1.5.7.final, <=2.2.3.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =2.2.3.final Source cves: CVE-2022-47551 Source advisory: GHSA-J94P-HV25-RM5G...

io.apiman:apiman-manager-api-micro (>=1.5.7.final, <=3.0.0.rc6), io.apiman:apiman-manager-api-war (>=1.5.7.final, <=2.0.0.final) +3 more potentially affected by CVE-2022-47551 via io.apiman:apiman-manager-api-rest-impl (>=1.5.7.final, <=3.0.0.rc6)

io.apiman:apiman-manager-api-rest-impl MAVEN version =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =3.0.0.rc6 Source cves: CVE-2022-47551 Source advisory: OSV:GHSA-J94P-HV25-RM5G...

io.apiman:apiman-manager-api-micro (>=1.5.7.final, <=3.0.0.rc6), io.apiman:apiman-manager-api-war (>=1.5.7.final, <=2.0.0.final) +3 more potentially affected by CVE-2022-47551 via io.apiman:apiman-manager-api-rest-impl (>=1.5.7.final, <=3.0.0.rc6)

io.apiman:apiman-manager-api-rest-impl MAVEN version =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =3.0.0.rc6 Source cves: CVE-2022-47551 Source advisory: MEND:CVE-2022-47551...

Sql injection

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

UBUNTU-CVE-2022-39323

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

CVE-2022-39323 SQL Injection on REST API in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

CVE-2022-39323: Improper Neutralization of Special Elements used in an SQL Command

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

GLPI SQL injection vulnerability

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

CVE-2022-39323

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

CVE-2022-39323

GLPI (Gestionnaire Libre de Parc Informatique) is affected by multiple CVEs described for GLPI-related components. CVE-2022-39323 involves a time-based SQL injection in the api REST user_token that can lead to full confidentiality and integrity/availability impact; the initial recommendation is t...

MAL-2022-1629 Malicious code in bluejeans-api-rest-meetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a43e4229bfe7054913dd74a700512a79d803b5d9bad65bd4280562a4f06c7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bluejeans-api-rest-meetings

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in bluejeans-api-rest-meetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a43e4229bfe7054913dd74a700512a79d803b5d9bad65bd4280562a4f06c7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-44617

A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated...

CVE-2021-39213

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

CVE-2021-39213

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

Design/Logic Flaw

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

CVE-2021-39213

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...

CVE-2021-39213: Improper Neutralization of Special Elements in Output Used by a Downstream Component

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround...