Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:34:34 +0000 bdu:2025-04581 https://cve.radiocsirt.org/vuln/bdu:2025-04581 bdu:2025-04581 https://cve.radiocsirt.org/vuln/bdu:2025-04581 certfr-2025-avi-0162 — De multiples vulnérabilités ont été découvertes dans GLPI. Elles permettent à un attaquant de provoquer une atteinte à… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0162 certfr-2025-avi-0162 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0162 EUVD-2026-219011 https://cve.radiocsirt.org/vuln/euvd-2026-219011 EUVD-2026-219011 https://cve.radiocsirt.org/vuln/euvd-2026-219011 fkie_cve-2025-21627 https://cve.radiocsirt.org/vuln/fkie_cve-2025-21627 <p>GLPI is a free asset and IT management software package. In versions prior to 10.0.18, a malicious link can be crafted to perform a reflected XSS attack on the search page. If the anonymous ticket creation is enabled, this attack can be performed by an unauthenticated user. Version 10.0.18 contains a fix for the issue.</p> <p>GLPI is a free asset and IT management software package. In versions prior to 10.0.18, a malicious link can be crafted to perform a reflected XSS attack on the search page. If the anonymous ticket creation is enabled, this attack can be performed by an unauthenticated user. Version 10.0.18 contains a fix for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-21627 UBUNTU-CVE-2025-21627 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-21627 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: glpi</p> <p>GLPI is a free asset and IT management software package. In versions prior to 10.0.18, a malicious link can be crafted to perform a reflected XSS attack on the search page. If the anonymous ticket creation is enabled, this attack can be performed by an unauthenticated user. Version 10.0.18 contains a fix for the issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: glpi</p> <p>GLPI is a free asset and IT management software package. In versions prior to 10.0.18, a malicious link can be crafted to perform a reflected XSS attack on the search page. If the anonymous ticket creation is enabled, this attack can be performed by an unauthenticated user. Version 10.0.18 contains a fix for the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-21627