https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:16:18.459168+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09128 bdu:2024-09128 2026-10-05T04:16:18.462326+00:00 bdu:2024-09128 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1064 certfr-2024-avi-1064 — De multiples vulnérabilités ont été découvertes dans GLPI. Certaines d'entre elles permettent à un attaquant de provoqu… 2026-10-05T04:16:18.462357+00:00 certfr-2024-avi-1064 https://cve.radiocsirt.org/vuln/euvd-2026-206872 EUVD-2026-206872 2026-10-05T04:16:18.462375+00:00 EUVD-2026-206872 https://cve.radiocsirt.org/vuln/fkie_cve-2024-50339 fkie_cve-2024-50339 2026-10-05T04:16:18.462387+00:00

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-50339 UBUNTU-CVE-2024-50339 2026-10-05T04:16:18.462413+00:00

Affected: Ubuntu:16.04:LTS: glpi

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue.