TI-2026-20967 CVE-2026-25937
GLPI has a MFA bypass
Priority LOW 31
GLPI is a free Asset and IT management software package.
Vulnerabilities
13 records
TI-2026-20966 CVE-2026-25936
GLPI Vulnerable to Authenticated SQL Injection
Priority LOW 38
GLPI is a free Asset and IT management software package.
Priority MEDIUM 41
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.
Priority MEDIUM 40
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing.
Priority MEDIUM 60
Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled.
TI-2023-13361 CVE-2023-28855
Fields GLPI plugin vulnerable to unauthorized write access to additional fields
Priority LOW 30
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.
TI-2021-16575 CVE-2021-39190
SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Priority LOW 31
The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI.
Priority HIGH 82
GLPI is an open source IT Asset Management, issue tracking system and service desk system.
TI-2019-09517 CVE-2019-12724 · GHSA-vj4j-j5g4-3hfq
An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI.
Priority LOW 30
An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI.
TI-2019-09516 CVE-2019-12723 · GHSA-4g9c-8w59-m7p5
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI.
Priority MEDIUM 46
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI.
TI-2019-07550 CVE-2019-10232 · GHSA-hf3r-7c2r-pvhg
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
Priority MEDIUM 62
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
TI-2019-07549 CVE-2019-10231 · GHSA-rqpr-xfvf-qr4v
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing…
Priority MEDIUM 47
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication.
TI-2018-05287 CVE-2018-7289 · GHSA-f67c-8p6v-x8xg
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito…
Priority LOW 20
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2.