Lucene search
+L

74 matches found

CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•26 views

GLPI Inventory Plugin SQL注入漏洞

GLPI Inventory Plugin is an open source plugin for GLPI France. It is used to handle various types of tasks for GLPI agents. A SQL injection vulnerability exists in GLPI Inventory Plugin 1.5.0 and prior versions, which stems from user input that is not adequately validated and escaped, and could...

7.5CVSS7.2AI score0.06576EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•6 views

CVE-2025-32786: Improper Neutralization of Special Elements used in an SQL Command

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1...

7.5CVSS7.3AI score0.06576EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2018-17022

Malware in sbrugna...

8CVSS8.1AI score0.01097EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-14843

Malicious code in bioql PyPI...

8.2CVSS6.4AI score0.00433EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-6436

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00336EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2022-31082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inventory-plug...

9.8CVSS8.2AI score0.01043EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/05 12:00 a.m.•12 views

glpi-inventory-plugin 安全漏洞

glpi-inventory-plugin is a GLPI open source GLPI inventory plugin. A security vulnerability exists in glpi-inventory-plugin versions prior to 2.0.2, which stems from a file disclosure vulnerability in the /ajax/screenshot.php endpoint...

7.7CVSS6.4AI score0.00279EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/03/27 2:32 p.m.•19 views

CVE-2025-27147

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS7AI score0.00433EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/25 3:15 p.m.•26 views

CVE-2025-27147

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS0.00433EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/25 2:26 p.m.•23 views

CVE-2025-27147 GLPI Inventory plugin has Improper Access Control Vulnerability

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS7.2AI score0.00433EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/25 2:26 p.m.•16 views

CVE-2025-27147 GLPI Inventory plugin has Improper Access Control Vulnerability

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS6.8AI score
SaveExploits0References4
CVE
CVE
•added 2025/03/25 2:26 p.m.•99 views

CVE-2025-27147

The CVE-2025-27147 issue affects the GLPI Inventory Plugin used with GLPI, where versions prior to 1.5.0 contain an improper access control vulnerability. Reported details across connected sources consistently point to an access-control weakness in GLPI Inventory Plugin tasks (network discovery, ...

8.2CVSS7.2AI score0.00433EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/25 2:26 p.m.•45 views

CVE-2025-27147 GLPI Inventory plugin has Improper Access Control Vulnerability

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS0.00433EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/25 12:00 a.m.•4 views

CVE-2025-27147: Improper Limitation of a Pathname to a Restricted Directory

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory SNMP, software deployment, VMWare ESX host remote inventory, and data collection files, Windows registry, WMI. Versions prior to 1.5.0 have an improper access control vulnerability...

8.2CVSS7.6AI score0.00433EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/25 12:00 a.m.•13 views

GLPI Inventory Plugin 安全漏洞

GLPI Inventory Plugin is an open source plugin for GLPI France. It is used to handle various types of tasks for GLPI agents. A security vulnerability exists in GLPI Inventory Plugin versions prior to 1.5.0 that stems from improper access control...

8.2CVSS6.5AI score0.00433EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/03/25 12:00 a.m.•19 views

PT-2025-12806 · Glpi +1 · Glpi Inventory Plugin +1

Name of the Vulnerable Software and Affected Versions: GLPI Inventory Plugin versions prior to 1.5.0 Description: The GLPI Inventory Plugin handles various tasks for GLPI agents, including network discovery and inventory, software deployment, and data collection. It has an improper access control...

8.2CVSS6.4AI score0.00433EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
•added 2025/03/16 1:16 p.m.•35 views

CVE-2025-26626

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

6.5CVSS6.9AI score0.00336EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/14 1:15 p.m.•30 views

CVE-2025-26626

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

6.5CVSS0.00336EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/14 12:47 p.m.•14 views

CVE-2025-26626 GLPI Inventory Plugin vulnerable to reflective Cross-site Scripting

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

6.5CVSS6.4AI score0.00336EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/14 12:47 p.m.•79 views

CVE-2025-26626

GLPI Inventory Plugin (for GLPI) is affected by a reflective cross-site scripting vulnerability in versions prior to 1.5.0. The issue allows execution of JavaScript code and is tracked as CVE-2025-26626. A fixed release is 1.5.0. The CVSSv3.1 base score is 6.5 (MEDIUM), with network attack vector...

6.5CVSS6.4AI score0.00336EPSS
SaveExploits0References2
Rows per page
Query Builder