CVE-2026-102374

Versions of GestSup prior to 3.2.62 are vulnerable to a stored cross-site scripting (XSS) vulnerability within the IMAP OAuth connector . The root cause is the double-decoding of MIME-encoded email subjects after HTML escaping has already occurred. This allows unauthenticated attackers to send cr...

Linux Distros Unpatched Vulnerability : CVE-2025-23046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a Mail servers authentication provider is...

Incorrect Implementation of Authentication Algorithm

Overview glpi/glpi is a free Asset and IT Management Software package with ITIL Service Desk, licenses tracking and software auditing. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm due to improper validation in the OauthIMAP plugin. If a...

GLPI security vulnerabilities

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...