https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:17:40.031612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05817 bdu:2024-05817 2026-10-04T08:17:40.151647+00:00 bdu:2024-05817 https://cve.radiocsirt.org/vuln/certfr-2022-ale-010 certfr-2022-ale-010 — Le 14 septembre 2022, l'éditeur de GLPI (Gestionnaire Libre de Parc Informatique) a déclaré plusieurs vulnérabilités su… 2026-10-04T08:17:40.151688+00:00 certfr-2022-ale-010 https://cve.radiocsirt.org/vuln/certfr-2022-avi-832 certfr-2022-avi-832 — De multiples vulnérabilités ont été découvertes dans Synology GLPI. Elles permettent à un attaquant de provoquer une ex… 2026-10-04T08:17:40.151723+00:00 certfr-2022-avi-832 https://cve.radiocsirt.org/vuln/euvd-2026-233712 EUVD-2026-233712 2026-10-04T08:17:40.151738+00:00 EUVD-2026-233712 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35947 fkie_cve-2022-35947 2026-10-04T08:17:40.151749+00:00

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions have been found to be vulnerable to a SQL injection attack which an attacker could leverage to simulate an arbitrary user login. Users are advised to upgrade to version 10.0.3. Users unable to upgrade should disable the `Enable login with external token` API configuration.

 https://cve.radiocsirt.org/vuln/gsd-2022-35947 gsd-2022-35947 2026-10-04T08:17:40.151781+00:00 gsd-2022-35947 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-35947 UBUNTU-CVE-2022-35947 2026-10-04T08:17:40.151791+00:00

Affected: Ubuntu:16.04:LTS: glpi

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions have been found to be vulnerable to a SQL injection attack which an attacker could leverage to simulate an arbitrary user login. Users are advised to upgrade to version 10.0.3. Users unable to upgrade should disable the `Enable login with external token` API configuration.