Vulnerabilities > Glpi Project > High

DATE CVE VULNERABILITY TITLE RISK
2024-02-01 CVE-2023-51446 LDAP Injection vulnerability in Glpi-Project Glpi
GLPI is a Free Asset and IT Management Software package.
network
high complexity
glpi-project CWE-90
8.1
2023-12-13 CVE-2023-43813 SQL Injection vulnerability in Glpi-Project Glpi
GLPI is a free asset and IT management software package.
network
low complexity
glpi-project CWE-89
8.8
2023-09-27 CVE-2023-41322 Unspecified vulnerability in Glpi-Project Glpi
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing.
network
low complexity
glpi-project
8.8
2023-09-27 CVE-2023-41324 Unspecified vulnerability in Glpi-Project Glpi
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing.
network
low complexity
glpi-project
8.8
2023-09-27 CVE-2023-41326 Unspecified vulnerability in Glpi-Project Glpi
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing.
network
low complexity
glpi-project
8.8
2023-07-05 CVE-2023-35939 Incorrect Authorization vulnerability in Glpi-Project Glpi
GLPI is a free asset and IT management software package.
network
low complexity
glpi-project CWE-863
8.1
2023-07-05 CVE-2023-35940 Missing Authorization vulnerability in Glpi-Project Glpi
GLPI is a free asset and IT management software package.
network
low complexity
glpi-project CWE-862
7.5
2023-06-23 CVE-2023-34254 OS Command Injection vulnerability in Glpi-Project Glpi Agent
The GLPI Agent is a generic management agent.
network
low complexity
glpi-project CWE-78
7.2
2023-04-16 CVE-2022-34126 Path Traversal vulnerability in Glpi-Project Activity
The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter.
network
low complexity
glpi-project CWE-22
7.5
2023-04-16 CVE-2022-34127 Path Traversal vulnerability in Glpi-Project Manageentities
The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter.
network
low complexity
glpi-project CWE-22
7.5