glpi vulnerabilities (Ubuntu)
195 vulnerabilities.
-
glpiUbuntu GLPI through 12.0.0 Missing Authorization via ajax/map.php 5.3 Medium -
glpiUbuntu GLPI: SQL injection in history tab 7.1 High -
glpiUbuntu GLPI: Arbitrary Document Read via Form Context Authorization Bypass 7.1 High -
glpiUbuntu GLPI: RCE via Form import 9.4 Critical -
glpiUbuntu GLPI: Privilege Escalation via authtype API manipulation 7.5 High -
glpiUbuntu GLPI: Reflected XSS in dashboards 7.5 High -
glpiUbuntu GLPI: arbitrary file deletion 8.5 High -
glpiUbuntu GLPI: Stored XSS in suppliers 8.5 High -
glpiUbuntu GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover via Brute Force 7.7 High -
glpiUbuntu GLPI: Unallowed modfication of knowbase items comments and translations 5.3 Medium -
glpiUbuntu GLPI: Unallowed authentication method update by administrator 5.9 Medium -
glpiUbuntu GLPI: Unauthorized Debug Mode Activation via Profile Update (Privilege Escalation) 5.3 Medium -
glpiUbuntu GLPI: Unexpected access to update operations through the API 6.0 Medium -
glpiUbuntu GLPI: LDAP filter injection in user import feature 4.6 Medium -
glpiUbuntu glpi-project glpi Document document.send.php canViewFile authorization 6.3 Medium -
glpiUbuntu GLPI has stored XSS in asset locks 8.4 High -
glpiUbuntu GLPI vulnerable to arbitrary file access 5.9 Medium -
glpiUbuntu GLPI Vulnerable to Arbitrary Item Deletion via Planning Endpoint 7.0 High -
glpiUbuntu GLPI vulnerable to arbitrary files deletion by technician 7.0 High -
glpiUbuntu GLPI vulnerable to unauthorized reading of a specific asset object 7.0 High -
glpiUbuntu GLPI Vulnerable to Stored XSS in ITIL Costs 7.1 High -
glpiUbuntu GLPI 11.0.0 - Stored XSS in knowledge base 8.4 High -
glpiUbuntu GLPI: Unauthorized export of form structure 5.1 Medium -
glpiUbuntu GLPI has an Authenticated SQL Injection via log exports 7.2 High -
glpiUbuntu GLPI has an Unauthenticated SQL Injection via Search engine 8.1 High -
glpiUbuntu GLPI has an Unauthenticated Stored XSS via inventory 7.5 High -
glpiUbuntu GLPI has a Server-Side Template Injection via Double-Compilation 9.1 Critical -
glpiUbuntu GLPI has Stored XSS in Supplier 'Website' field 7.2 High -
glpiUbuntu GLPI has a MFA bypass 6.5 Medium -
glpiUbuntu GLPI Vulnerable to Authenticated SQL Injection 6.5 Medium -
glpiUbuntu GLPI affected by Remote Code Execution via malicious upload 8.1 High -
glpiUbuntu GLPI is Vulnerable to Authenticated SQL Injection 6.5 Medium -
glpiUbuntu GLPI is vulnerable to session stealing on externally authenticated user change 4.3 Medium -
glpiUbuntu GLPI is Vulnerable to SSRF via Webhooks 4.1 Medium -
glpiUbuntu GLPI has an unauthenticated SQL injection through the inventory endpoint 7.5 High -
glpiUbuntu GLPI incorrectly authorizes access to documents 7.5 High -
glpiUbuntu GLPI 9.5.7 Username Enumeration Vulnerability via Lost Password Endpoint 6.9 Medium -
glpiUbuntu GLPI vulnerable to unauthorized access to restricted Knowledge Base items through the API 6.5 Medium -
glpiUbuntu GLPI Vulnerable to Unauthenticated Stored XSS on the Inventory page 6.5 Medium -
glpiUbuntu GLPI permits unauthorized rules execution order 7.5 High -
glpiUbuntu GLPI permits reservation modification by unauthorized users 5.4 Medium -
glpiUbuntu GLPI technicians can access unauthorized information through external links 2.7 Low -
glpiUbuntu GLPI's incomprehensive permission checks can lead to data removal from allowed users 4.3 Medium -
glpiUbuntu GLPI exposes data to non-allowed users 6.5 Medium -
glpiUbuntu GLPI's MailCollector Receiver is vulnerable to credential exfiltration 6.5 Medium -
glpiUbuntu GLPI is vulnerable to XSS and open redirection attacks through planning feature 6.5 Medium -
glpiUbuntu GLPI has overly permissive URL verification 3.5 Low -
glpiUbuntu GLPI is susceptible to Stored XSS attack through project's kanban 4.5 Medium -
glpiUbuntu GLPI allows authenticated remote code execution 8.6 High -
glpiUbuntu GLPI allows unauthenticated SQL injection through the inventory endpoint 7.5 High - Show olderLoading…