Lucene search
K

13 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/08 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-29047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the log...

8.8CVSS5.9AI score0.00013EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/04/07 5:3 p.m.1 views

CVE-2026-29047

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6...

8.8CVSS5.9AI score0.00013EPSS
Exploits0References1
Snyk
Snyk
added 2026/04/06 4:10 p.m.1 views

SQL Injection

Overview glpi/glpi is a free Asset and IT Management Software package with ITIL Service Desk, licenses tracking and software auditing. Affected versions of this package are vulnerable to SQL Injection in the logs export process. An attacker can execute arbitrary SQL commands by submitting crafted...

8.8CVSS6.2AI score0.00013EPSS
Exploits0References2
NVD
NVD
added 2026/04/06 3:17 p.m.0 views

CVE-2026-29047

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6...

8.8CVSS0.00013EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/04/06 3:17 p.m.3 views

CVE-2026-29047

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6...

8.8CVSS5.9AI score0.00013EPSS
Exploits0References2
OSV
OSV
added 2026/04/06 3:17 p.m.1 views

UBUNTU-CVE-2026-29047

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6...

8.8CVSS5.9AI score0.00013EPSS
Exploits0References3
CVE
CVE
added 2026/04/06 2:39 p.m.4 views

CVE-2026-29047

CVE-2026-29047 affects GLPI; from 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This is fixed in 10.0.24 and 11.0.6. Impact includes potential confidentiality, integrity, and availability risks. Remediation: upgrade to GLPI 10....

8.8CVSS5.9AI score0.00013EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/04/06 2:39 p.m.2 views

EUVD-2026-19249

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6...

7.2CVSS5.9AI score0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/06 2:39 p.m.20 views

CVE-2026-29047 GLPI has an Authenticated SQL Injection via log exports

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6...

7.2CVSS0.00013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-30614

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6...

7.2CVSS5.9AI score0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-7586

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.01482EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.1 views

Atlassian Jira授权问题漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage various types of issues and defects in the workplace. An authorization issue vulnerability exists in Atlassian Jira Server and Data Center, which stems from the product's...

5.3CVSS5.7AI score0.00184EPSS
Exploits0References2
NVD
NVD
added 2021/10/13 4:15 p.m.8 views

CVE-2021-20129

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs...

7.5CVSS0.01482EPSS
Exploits1References1
Rows per page
Query Builder