https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:31:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04582 bdu:2025-04582 https://cve.radiocsirt.org/vuln/bdu:2025-04582 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0162 certfr-2025-avi-0162 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0162 https://cve.radiocsirt.org/vuln/euvd-2026-219023 EUVD-2026-219023 https://cve.radiocsirt.org/vuln/euvd-2026-219023 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23046 <p>GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a &#34;Mail servers&#34; authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI using a user name on which an Oauth authorization has already been established. Version 10.0.18 contains a patch. As a workaround, one may disable any &#34;Mail servers&#34; authentication provider configured to use an Oauth connection provided by the OauthIMAP plugin.</p> <p>GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a &#34;Mail servers&#34; authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI using a user name on which an Oauth authorization has already been established. Version 10.0.18 contains a patch. As a workaround, one may disable any &#34;Mail servers&#34; authentication provider configured to use an Oauth connection provided by the OauthIMAP plugin.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-23046 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-23046 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: glpi</p> <p>GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a &#34;Mail servers&#34; authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI using a user name on which an Oauth authorization has already been established. Version 10.0.18 contains a patch. As a workaround, one may disable any &#34;Mail servers&#34; authentication provider configured to use an Oauth connection provided by the OauthIMAP plugin.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: glpi</p> <p>GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a &#34;Mail servers&#34; authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI using a user name on which an Oauth authorization has already been established. Version 10.0.18 contains a patch. As a workaround, one may disable any &#34;Mail servers&#34; authentication provider configured to use an Oauth connection provided by the OauthIMAP plugin.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-23046