Поиск уязвимостей
Количество 14
Количество 14
ALT-PU-2022-2291
ALT-PU-2022-2291: package `glpi` update to version 10.0.2-alt1
CVE-2022-31056
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and all affected users are advised to upgrade.
CVE-2022-31056
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and all affected users are advised to upgrade.
CVE-2022-31056
GLPI is a Free Asset and IT Management Software package, Data center m ...
ALT-PU-2023-7633
ALT-PU-2023-7633: package `glpi` update to version 10.0.10-alt1
CVE-2022-31068
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated. This issue has been addressed in version 10.0.2 and all affected users are advised to upgrade.
CVE-2022-31068
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated. This issue has been addressed in version 10.0.2 and all affected users are advised to upgrade.
CVE-2022-31068
GLPI is a Free Asset and IT Management Software package, Data center m ...
CVE-2022-31061
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are required to exploit this vulnerability. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.
CVE-2022-31061
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are required to exploit this vulnerability. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.
CVE-2022-31061
GLPI is a Free Asset and IT Management Software package, Data center m ...
BDU:2022-04910
Уязвимость системы работы с заявками и инцидентами GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю осуществлять межсайтовые сценарные атаки
ALT-PU-2022-2177
ALT-PU-2022-2177: package `glpi` update to version 9.5.8-alt1
ROS-20240726-01
Множественные уязвимости glpi
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-2291 ALT-PU-2022-2291: package `glpi` update to version 10.0.2-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
 | CVE-2022-31056 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and all affected users are advised to upgrade. | CVSS3: 9.8 | 10% Низкий | больше 4 лет назад |
 | CVE-2022-31056 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and all affected users are advised to upgrade. | CVSS3: 9.8 | 10% Низкий | больше 4 лет назад |
| CVE-2022-31056 GLPI is a Free Asset and IT Management Software package, Data center m ... | CVSS3: 9.8 | 10% Низкий | больше 4 лет назад |
| ALT-PU-2023-7633 ALT-PU-2023-7633: package `glpi` update to version 10.0.10-alt1 | CVSS3: 10 | почти 3 года назад | |
| CVE-2022-31068 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated. This issue has been addressed in version 10.0.2 and all affected users are advised to upgrade. | CVSS3: 5.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-31068 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated. This issue has been addressed in version 10.0.2 and all affected users are advised to upgrade. | CVSS3: 5.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-31068 GLPI is a Free Asset and IT Management Software package, Data center m ... | CVSS3: 5.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-31061 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are required to exploit this vulnerability. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue. | CVSS3: 9.8 | 51% Средний | больше 4 лет назад |
| CVE-2022-31061 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are required to exploit this vulnerability. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue. | CVSS3: 9.8 | 51% Средний | больше 4 лет назад |
| CVE-2022-31061 GLPI is a Free Asset and IT Management Software package, Data center m ... | CVSS3: 9.8 | 51% Средний | больше 4 лет назад |
 | BDU:2022-04910 Уязвимость системы работы с заявками и инцидентами GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю осуществлять межсайтовые сценарные атаки | CVSS3: 9.8 | 51% Средний | больше 4 лет назад |
| ALT-PU-2022-2177 ALT-PU-2022-2177: package `glpi` update to version 9.5.8-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
 | ROS-20240726-01 Множественные уязвимости glpi | CVSS3: 9.8 | больше 2 лет назад |
Уязвимостей на страницу