3413 matches found
UBUNTU-CVE-2019-13239
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
CVE-2019-13239
Vulnerability overview : GLPI
CVE-2019-13239
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
CVE-2019-13239
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
CVE-2019-13239: Improper Neutralization of Input During Web Page Generation
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
Fedora Update for glpi FEDORA-2019-169f1eec7c
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 29 Update: glpi-9.3.4-2.fc29
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
Fedora Update for glpi FEDORA-2019-2bad806189
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 29 : glpi (2019-169f1eec7c)
Includes security fix backported from 9.4.3 - security Prevent execution of XSS on rich text, - security Prevent xss attack on user picture, Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
[SECURITY] Fedora 30 Update: glpi-9.4.3-1.fc30
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
Fedora 30 : glpi (2019-2bad806189)
Version 9.4.3 This is a security release, upgrading is highly recommended Non exhaustive list of changes : - security Prevent execution of XSS on rich text, - security Prevent xss attack on user picture, - Fix performance issues when using entities, - New Prevent take into account action on ticke...
PT-2019-13201
Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.4.3 Description The issue allows for XSS via a user picture in the inc/user.class.php file. Recommendations For versions prior to 9.4.3, update to version 9.4.3 or later to resolve the issue...
CVE-2019-12530
Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh...
CVE-2019-12530
Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh...
Improper access control
Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh...
CVE-2019-12530
Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh...
CVE-2019-12530
CVE-2019-12530 affects the stdonato Dashboard plugin for GLPI up to version 0.9.7. The issue is improper/access control in the plugin, impacting files in front/sh such as df.php, issue.php, load.php, mem.php, traf.php, and uptime.php. This results in a high-severity vulnerability with potential u...
CVE-2019-12530
Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh...
CVE-2019-12530: Improper Authentication
Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh...
PT-2019-12839
Name of the Vulnerable Software and Affected Versions GLPI stdonato Dashboard plugin versions through 0.9.7 Description Incorrect access control was discovered in the stdonato Dashboard plugin for GLPI, affecting several PHP files in the front/sh directory, including df.php, issue.php, load.php,...