Lucene search
+L

4 matches found

Tenable Nessus
Tenable Nessus
added 2024/04/24 12:0 a.m.27 views

FreeBSD : GLPI -- multiple vulnerabilities (bb49f1fa-00da-11ef-92b7-589cfc023192)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bb49f1fa-00da-11ef-92b7-589cfc023192 advisory. - GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Servic...

9.6CVSS5.9AI score0.58818EPSS
Exploits2References8
CVE
CVE
added 2024/03/18 4:11 p.m.113 views

CVE-2024-27096

GLPI (Free Asset and IT Management Software) is affected by CVE-2024-27096 : a SQL injection vulnerability in the search engine that can be exploited by an authenticated user to extract data from the database. The vulnerability has been patched in version 10.0.13 ; multiple sources (NVD, RH Red H...

7.7CVSS7.6AI score0.58818EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/18 4:11 p.m.33 views

CVE-2024-27096 SQL Injection in through the search engine

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can exploit a SQL injection vulnerability in the search engine to extract data from the database. This issue has been patched in versi...

7.7CVSS7.9AI score0.58818EPSS
Exploits0References3
FreeBSD
FreeBSD
added 2024/03/13 12:0 a.m.42 views

GLPI -- multiple vulnerabilities

GLPI team reports: GLPI 10.0.13 Changelog SECURITY - high SQL Injection in through the search engine CVE-2024-27096 SECURITY - moderate Blind SSRF using Arbitrary Object Instantiation CVE-2024-27098 SECURITY - moderate Stored XSS in dashboards CVE-2024-27104 SECURITY - moderate Reflected XSS in...

9.6CVSS7.6AI score0.58818EPSS
Exploits2References1
Rows per page
Query Builder