3412 matches found
Fedora Update for glpi FEDORA-2019-a66789a334
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 30 : glpi (2019-e50f92e4c1)
Version 9.4.1.1 Non exhaustive list of changes : - security Bad chevrons rendering on dropdowns 5468 - security Iframe and forms are rendered in rich text contents 5519 - security Type juggling authentication bypass 5520 - security Malicious images upload 5580 - security Password token date was n...
Fedora 29 : glpi (2019-c36819bf25)
Version 9.3.4 This is a security release, upgrading is highly recommended - security Prevent external redirections This release also fix some minor issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...
[SECURITY] Fedora 29 Update: glpi-9.3.4-1.fc29
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
PT-2019-13202
Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.4.1 Description An issue in GLPI allows a user's password to be changed again within 24 hours of a successful password reset, using only the associated email address. Recommendations For versions prior to 9.4.1, update...
Fedora 29 : glpi (2019-a66789a334)
Add security fix backported from 9.4 : - security Bad chevrons rendering on dropdowns 5468 - security Iframe and forms are rendered in rich text contents 5519 - security Type juggling authentication bypass 5520 - security Malicious images upload 5580 - security Password token date was not reset...
[SECURITY] Fedora 29 Update: glpi-9.3.3-2.fc29
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
[SECURITY] Fedora 30 Update: glpi-9.4.1.1-1.fc30
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
Code injection
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...
CVE-2019-10477
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...
CVE-2019-10477
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...
CVE-2019-10477
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...
CVE-2019-10477
The CVE covers the FusionInventory plugin for GLPI, where versions before 1.4 (GLPI 9.3.x) and before 1.1 (GLPI 9.4.x) mishandle sendXML actions. The issue is tied to the plugin’s handling of XML-sending actions, with public references indicating available fixes in the same project’s GLPI branche...
CVE-2019-10477
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...
CVE-2019-10477: Undefined Security Weakness
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...
PT-2019-11871
Name of the Vulnerable Software and Affected Versions FusionInventory plugin versions prior to 1.4 for GLPI 9.3.x FusionInventory plugin versions prior to 1.1 for GLPI 9.4.x Description The issue is related to the mishandling of sendXML actions by the FusionInventory plugin. Recommendations For...
Teclib GLPI Competitive Conditions Issue Vulnerability
Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A competitive conditions issue vulnerability exists in Teclib GLPI versions...
Teclib GLPI License Issue Vulnerability
Teclib GLPI is an IT asset management solution. A security vulnerability exists in the Auth::checkPassword in the inc/auth.class.php file in Teclib GLPI versions prior to 9.4.1.1. An attacker can exploit this vulnerability to bypass authentication...
Teclib GLPI SQL Injection Vulnerability
Teclib GLPI is an IT asset management solution. A SQL injection vulnerability exists in Teclib GLPI version 9.3.3 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'cycle' parameter of the /scripts/unlocktasks.php file...