glpi vulnerabilities (Ubuntu)
195 vulnerabilities.
glpiUbuntuPrivilege Escalation from technician to super-admin in GLPI4.9 MediumglpiUbuntuSensitive fields enumeration through API in GLPI4.9 MediumglpiUbuntuAccount takeover via SQL Injection in UI layout preferences in GLPI8.1 HighglpiUbuntuGLPI vulnerable to SQL injection via dashboard administration6.8 MediumglpiUbuntuGLPI vulnerable to SQL injection through Computer Virtual Machine information8.6 HighglpiUbuntuGLPI vulnerable to unauthenticated access to Dashboard data7.5 HighglpiUbuntuGLPI vulnerable to unauthorized access to Dashboard data8.1 HighglpiUbuntuGLPI vulnerable to SQL injection via inventory agent request8.6 HighglpiUbuntuGLPI vulnerable to reflected XSS in search pages6.5 MediumglpiUbuntuGLPI vulnerable to unauthorized access to KnowbaseItem data6.5 MediumglpiUbuntuGLPI vulnerable to unauthorized access to User data6.5 MediumglpiUbuntuRemote inventory task command injection when using ssh command mode7.7 HighglpiUbuntuGLPI vulnerable to stored Cross-site Scripting through dashboard administration4.8 MediumglpiUbuntuGLPI vulnerable to SQL injection through dynamic reports9.6 CriticalglpiUbuntuGLPI vulnerable to stored Cross-site Scripting in external links4.5 MediumglpiUbuntuGLPI vulnerable to Privilege Escalation from Technician to Super-Admin8.8 HighglpiUbuntuGLPI vulnerable to account takeover by authenticated user8.1 HighglpiUbuntuGLPI vulnerable to reflected Cross-site Scripting in search pages6.1 MediumglpiUbuntuglpi contains XSS Stored inside Standard Interface Help Link href attribute6.2 MediumglpiUbuntuglpi Unauthorized access to inventory files7.5 HighglpiUbuntuglpi subject to Cross-site Scripting (XSS) - Reflected6.8 MediumglpiUbuntuglpi contains XSS in RSS Description Link6.2 MediumglpiUbuntuglpi vulnerable to XSS on external links6.2 MediumglpiUbuntuglpi vulnerable to Unauthorized access to data export6.5 MediumglpiUbuntuImproper input validation on emails links in GLPI2.6 LowglpiUbuntuCross-Site Scripting (XSS) through public RSS feed in GLPI4.5 MediumglpiUbuntuStored Cross-Site Scripting (XSS) in entity name in GLPI4.9 MediumglpiUbuntuStored Cross-Site Scripting (XSS) in user information in GLPI3.5 LowglpiUbuntuStored Cross-Site Scripting (XSS) through asset inventory in GLPI7.5 HighglpiUbuntuImproper access to debug panel in GLPI4.3 MediumglpiUbuntuSQL Injection on REST API in GLPI7.4 HighglpiUbuntuCross-Site Scripting (XSS) in external links in GLPI4.5 MediumglpiUbuntuBlind Server-Side Request Forgery (SSRF) in RSS feeds and planning3.5 LowglpiUbuntuStored Cross-Site Scripting (XSS) on login page in GLPI5.2 MediumglpiUbuntuuser session persists even after permanently deleting account in GLPI4.7 MediumglpiUbuntuStored Cross Site Scripting (XSS) through global search in GLPI6.8 MediumglpiUbuntuSQL injection through plugin controller in GLPI5.5 MediumglpiUbuntuBlind Server-Side Request Forgery (SSRF) in GLPI3.5 LowglpiUbuntuCross site scripting (XSS) via registration API in GLPI6.3 MediumglpiUbuntuLeak of sensitive information through login page error in GLPI5.3 MediumglpiUbuntuSQL injection on login page in GLPI9.8 CriticalglpiUbuntuSensitive Data Exposure on Refused Inventory Files in GLPI5.3 MediumglpiUbuntuSQL injection with _actor parameter in GLPI9.8 CriticalglpiUbuntuSQL Injection via package deployment tasks in glpi-inventory-plugin5.8 MediumglpiUbuntuSQL injection in GLPI8.1 HighglpiUbuntuSQL injection using custom CSS administration form in GLPI4.9 MediumglpiUbuntuReflected XSS using reload button in GLPI6.1 MediumglpiUbuntuIP restriction on GLPI API Bypass with custom header injection6.8 MediumglpiUbuntuDisclosure of GLPI and server information in telemetry endpoint5.3 MediumglpiUbuntuAutologin cookie accessible by scripts6.5 Medium- Show moreLoading…