glpi vulnerabilities (Ubuntu)
195 vulnerabilities.
glpiUbuntuGLPI allows SQL injection through the rules configuration8.2 HighglpiUbuntuGLPI allows unauthorized access to debug mode6.5 MediumglpiUbuntuGLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin6.3 MediumglpiUbuntuGLPI: Plugins are disabled accessing one page6.9 MediumglpiUbuntuGLPI Cross-site Scripting vulnerability6.5 MediumglpiUbuntuGLPI vulnerable to exposure of sensitive information in the `status.php` endpoint5.8 MediumglpiUbuntuGLPI index.php redirect5.3 MediumglpiUbuntuGLPI vulnerable to unauthenticated session hijacking9.3 CriticalglpiUbuntuGLPI vulnerable to authenticated insecure account deletion7.2 HighglpiUbuntuGLPI vulnerable to account takeover via the password reset feature7.5 HighglpiUbuntuGLPI vulnerable to account takeover via API7.5 HighglpiUbuntuGLPI vulnerable to account takeover without privilege escalation through the API7.6 HighglpiUbuntuGLPI vulnerable to enumeration of users' email addresses by unauthenticated user7.5 HighglpiUbuntuGLPI allows API document download without rights5.3 MediumglpiUbuntuGLPI has a stored XSS at src/RSSFeed.php5.7 MediumglpiUbuntuGLPI has a reflected XSS in ajax/cable.php6.5 MediumglpiUbuntuGLPI has a Reflected XSS in /front/stat.graph.php6.5 MediumglpiUbuntuGLPI has an Authenticated SQL Injection6.5 MediumglpiUbuntuGLPI has multiple reflected XSS6.5 MediumglpiUbuntuReflected XSS in Software form6.5 MediumglpiUbuntuAuthenticated SQL injection in ticket form6.5 MediumglpiUbuntuGLPI has multiple reflected XSS6.5 MediumglpiUbuntuGLPI allows account takeover via SQL Injection in AJAX scripts8.1 HighglpiUbuntuGLPI has a stored XSS via document upload6.7 MediumglpiUbuntuGLPI allows remote code execution through the plugin loader7.2 HighglpiUbuntuGLPI allows account takeover via SQL Injection in AJAX scripts8.1 HighglpiUbuntuGLPI allows Authenticated File Upload to Restricted Tickets4.3 MediumglpiUbuntuGLPI contains an authenticated SQL injection7.7 HighglpiUbuntuGLPI contains an SQL injection through the saved searches7.1 HighglpiUbuntuGlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folder7.3 HighglpiUbuntuGLPI-Agent's MSI package installation permits local users to change Agent configuration7.3 HighglpiUbuntuReflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI5.3 MediumglpiUbuntuStored XSS in dashboards in GLPI4.5 MediumglpiUbuntuBlind Server-Side Request Forgery (SSRF) using Arbitrary Object Instantiation in GLPI6.4 MediumglpiUbuntuSQL Injection in through the search engine7.7 HighglpiUbuntuSensitive fields access through dropdowns in GLPI6.5 MediumglpiUbuntuglpi Users emails enumeration6.5 MediumglpiUbuntuAn issue in GLPI v.10.0.12 and before allows a remote attacker to execute arbitrary code,...8.8 HighglpiUbuntuGLPI LDAP Injection during authentication5.9 MediumglpiUbuntuGLPI reflected XSS in reports pages6.5 MediumglpiUbuntuGLPI SQL injection through inventory agent request8.6 HighglpiUbuntuGLPI Remote code execution from LDAP server configuration form on PHP 7.47.2 HighglpiUbuntuglpi Authenticated SQL Injection6.5 MediumglpiUbuntuGLPI vulnerable to unallowed PHP script execution10.0 CriticalglpiUbuntuFile deletion through document upload process in GLPI7.7 HighglpiUbuntuSQL injection in ITIL actors in GLPI6.5 MediumglpiUbuntuPhishing through a login page malicious URL in GLPI5.3 MediumglpiUbuntuAccount takeover via Kanban feature in GLPI8.1 HighglpiUbuntuAccount takeover through API in GLPI8.1 HighglpiUbuntuUsers login enumeration by unauthenticated user in GLPI5.3 Medium- Show moreLoading…