Поиск уязвимостей
Количество 15
Количество 15
ROS-20241008-07
Множественные уязвимости glpi
ALT-PU-2023-8087
ALT-PU-2023-8087: package `glpi` update to version 10.0.11-alt1
ALT-PU-2023-8061
ALT-PU-2023-8061: package `glpi` update to version 10.0.11-alt1
CVE-2023-43813
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perform a SQL injection. Version 10.0.11 contains a patch for the issue.
CVE-2023-43813
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perform a SQL injection. Version 10.0.11 contains a patch for the issue.
CVE-2023-43813
GLPI is a free asset and IT management software package. Starting in v ...
BDU:2024-02266
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
CVE-2023-46727
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used to drive a SQL injection attack. Version 10.0.11 contains a patch for the issue. As a workaround, disable native inventory.
CVE-2023-46727
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used to drive a SQL injection attack. Version 10.0.11 contains a patch for the issue. As a workaround, disable native inventory.
CVE-2023-46727
GLPI is a free asset and IT management software package. Starting in v ...
CVE-2023-46726
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP 7.4 only, the LDAP server configuration form can be used to execute arbitrary code previously uploaded as a GLPI document. Version 10.0.11 contains a patch for the issue.
CVE-2023-46726
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP 7.4 only, the LDAP server configuration form can be used to execute arbitrary code previously uploaded as a GLPI document. Version 10.0.11 contains a patch for the issue.
CVE-2023-46726
GLPI is a free asset and IT management software package. Starting in v ...
BDU:2023-09030
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с неверной нейтрализация особых элементов в выходных данных, позволяющая нарушителю выполнить произвольный код
BDU:2023-09029
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с некорректной нейтрализацией специальных элементов, используемых в SQL-командах, позволяющая нарушителю измененить логику запроса к базе данных путем внедрения произвольных операторов SQL
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20241008-07 Множественные уязвимости glpi | CVSS3: 9.8 | около 2 лет назад | |
| ALT-PU-2023-8087 ALT-PU-2023-8087: package `glpi` update to version 10.0.11-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| ALT-PU-2023-8061 ALT-PU-2023-8061: package `glpi` update to version 10.0.11-alt1 | CVSS3: 9.8 | почти 3 года назад | |
 | CVE-2023-43813 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perform a SQL injection. Version 10.0.11 contains a patch for the issue. | CVSS3: 8.8 | 31% Средний | почти 3 года назад |
 | CVE-2023-43813 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perform a SQL injection. Version 10.0.11 contains a patch for the issue. | CVSS3: 8.8 | 31% Средний | почти 3 года назад |
| CVE-2023-43813 GLPI is a free asset and IT management software package. Starting in v ... | CVSS3: 8.8 | 31% Средний | почти 3 года назад |
 | BDU:2024-02266 Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 31% Средний | почти 3 года назад |
| CVE-2023-46727 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used to drive a SQL injection attack. Version 10.0.11 contains a patch for the issue. As a workaround, disable native inventory. | CVSS3: 9.8 | 68% Средний | почти 3 года назад |
| CVE-2023-46727 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used to drive a SQL injection attack. Version 10.0.11 contains a patch for the issue. As a workaround, disable native inventory. | CVSS3: 9.8 | 68% Средний | почти 3 года назад |
| CVE-2023-46727 GLPI is a free asset and IT management software package. Starting in v ... | CVSS3: 9.8 | 68% Средний | почти 3 года назад |
| CVE-2023-46726 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP 7.4 only, the LDAP server configuration form can be used to execute arbitrary code previously uploaded as a GLPI document. Version 10.0.11 contains a patch for the issue. | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| CVE-2023-46726 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP 7.4 only, the LDAP server configuration form can be used to execute arbitrary code previously uploaded as a GLPI document. Version 10.0.11 contains a patch for the issue. | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| CVE-2023-46726 GLPI is a free asset and IT management software package. Starting in v ... | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| BDU:2023-09030 Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с неверной нейтрализация особых элементов в выходных данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| BDU:2023-09029 Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с некорректной нейтрализацией специальных элементов, используемых в SQL-командах, позволяющая нарушителю измененить логику запроса к базе данных путем внедрения произвольных операторов SQL | CVSS3: 9.8 | 68% Средний | почти 3 года назад |
Уязвимостей на страницу