Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 5

Количество 5

ubuntu логотип

CVE-2026-48482

около 2 месяцев назад

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form import with a crafted illustration or scene identifier that traverses outside the intended custom-asset directory. The imported file can be written to an executable server location, allowing a malicious script to be invoked remotely. This issue is fixed in version 11.0.8.

EPSS: Низкий
nvd логотип

CVE-2026-48482

около 2 месяцев назад

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form import with a crafted illustration or scene identifier that traverses outside the intended custom-asset directory. The imported file can be written to an executable server location, allowing a malicious script to be invoked remotely. This issue is fixed in version 11.0.8.

EPSS: Низкий
debian логотип

CVE-2026-48482

около 2 месяцев назад

GLPI is a free asset and IT management software package. From 11.0.0 u ...

EPSS: Низкий
redos логотип

ROS-20261109-80-0190

4 дня назад

Уязвимость glpi

CVSS3: 9.1
EPSS: Низкий
redos логотип

ROS-20261109-73-0191

4 дня назад

Уязвимость glpi

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-48482

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form import with a crafted illustration or scene identifier that traverses outside the intended custom-asset directory. The imported file can be written to an executable server location, allowing a malicious script to be invoked remotely. This issue is fixed in version 11.0.8.

0%
Низкий
около 2 месяцев назад
nvd логотип
CVE-2026-48482

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form import with a crafted illustration or scene identifier that traverses outside the intended custom-asset directory. The imported file can be written to an executable server location, allowing a malicious script to be invoked remotely. This issue is fixed in version 11.0.8.

0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2026-48482

GLPI is a free asset and IT management software package. From 11.0.0 u ...

0%
Низкий
около 2 месяцев назад
redos логотип
ROS-20261109-80-0190

Уязвимость glpi

CVSS3: 9.1
0%
Низкий
4 дня назад
redos логотип
ROS-20261109-73-0191

Уязвимость glpi

CVSS3: 9.1
0%
Низкий
4 дня назад

Уязвимостей на страницу