Поиск уязвимостей
Количество 21
Количество 21
ALT-PU-2025-16293
ALT-PU-2025-16293: package `glpi` update to version 10.0.22-alt1
ALT-PU-2026-2293
ALT-PU-2026-2293: package `glpi` update to version 10.0.23-alt0.p10.1
CVE-2025-59935
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch.
CVE-2025-59935
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch.
CVE-2025-59935
GLPI is a free asset and IT management software package. Starting in v ...
ROS-20260319-80-0012
Уязвимость glpi
BDU:2026-05704
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код1
ROS-20260319-73-0013
Уязвимость glpi
CVE-2025-64520
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.
CVE-2025-64520
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.
CVE-2025-64520
GLPI is a free asset and IT management software package. Starting in v ...
CVE-2025-64516
GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item (ticket, asset, ...). If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed in 10.0.21 and 11.0.3.
CVE-2025-64516
GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item (ticket, asset, ...). If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed in 10.0.21 and 11.0.3.
CVE-2025-64516
GLPI is a free asset and IT management software package. Prior to 10.0 ...
ROS-20260319-80-0013
Уязвимость glpi
BDU:2026-05594
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI связана с недостатками процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260319-80-0005
Уязвимость glpi
BDU:2026-05593
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI связана с недостатками контроля доступа, позволяющая нарушителю повысить свои привилегии
ROS-20260319-73-0014
Уязвимость glpi
ROS-20260319-73-0006
Уязвимость glpi
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2025-16293 ALT-PU-2025-16293: package `glpi` update to version 10.0.22-alt1 | CVSS3: 7.5 | 11 месяцев назад | |
| ALT-PU-2026-2293 ALT-PU-2026-2293: package `glpi` update to version 10.0.23-alt0.p10.1 | CVSS3: 8.8 | 9 месяцев назад | |
 | CVE-2025-59935 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch. | CVSS3: 6.5 | 0% Низкий | 11 месяцев назад |
 | CVE-2025-59935 GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch. | CVSS3: 6.5 | 0% Низкий | 11 месяцев назад |
| CVE-2025-59935 GLPI is a free asset and IT management software package. Starting in v ... | CVSS3: 6.5 | 0% Низкий | 11 месяцев назад |
 | ROS-20260319-80-0012 Уязвимость glpi | CVSS3: 6.5 | 0% Низкий | 8 месяцев назад |
 | BDU:2026-05704 Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код1 | CVSS3: 6.5 | 0% Низкий | 11 месяцев назад |
| ROS-20260319-73-0013 Уязвимость glpi | CVSS3: 6.5 | 0% Низкий | 8 месяцев назад |
| CVE-2025-64520 GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch. | CVSS3: 4.3 | 0% Низкий | 11 месяцев назад |
| CVE-2025-64520 GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch. | CVSS3: 4.3 | 0% Низкий | 11 месяцев назад |
| CVE-2025-64520 GLPI is a free asset and IT management software package. Starting in v ... | CVSS3: 4.3 | 0% Низкий | 11 месяцев назад |
| CVE-2025-64516 GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item (ticket, asset, ...). If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed in 10.0.21 and 11.0.3. | CVSS3: 7.5 | 0% Низкий | 10 месяцев назад |
| CVE-2025-64516 GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item (ticket, asset, ...). If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed in 10.0.21 and 11.0.3. | CVSS3: 7.5 | 0% Низкий | 10 месяцев назад |
| CVE-2025-64516 GLPI is a free asset and IT management software package. Prior to 10.0 ... | CVSS3: 7.5 | 0% Низкий | 10 месяцев назад |
| ROS-20260319-80-0013 Уязвимость glpi | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
| BDU:2026-05594 Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI связана с недостатками процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.3 | 0% Низкий | 11 месяцев назад |
| ROS-20260319-80-0005 Уязвимость glpi | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
| BDU:2026-05593 Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI связана с недостатками контроля доступа, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.5 | 0% Низкий | 10 месяцев назад |
| ROS-20260319-73-0014 Уязвимость glpi | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
| ROS-20260319-73-0006 Уязвимость glpi | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу