teclib-edition kayıtları
teclib-edition üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %23,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-20 Improper Input Validation2
- CWE-172 Encoding Error1
- CWE-502 Deserialization of Untrusted Data1
- CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
46Planlayın | CVE-2019-10232Kavram kanıtı | Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.teclib-edition · gestionnaire libre de parc informatique · CWE-89 | Kritik9,8 | — | %22,3 | 27 Mar 2019 |
42Planlayın | CVE-2021-43779İstismar yok | Remote Command Execution vulnerabilityteclib-edition · addressing · CWE-20 | Kritik9,9 | — | %9,1 | 5 Oca 2022 |
40Planlayın | CVE-2019-10231İstismar yok | Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication.teclib-edition · gestionnaire libre de parc informatique · CWE-843 | Kritik9,8 | — | %2,4 | 27 Mar 2019 |
40Planlayın | CVE-2019-12723İstismar yok | An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI.teclib-edition · fields · CWE-89 | Kritik9,8 | — | %2,0 | 10 Tem 2019 |
36İzleyin | CVE-2026-23489Kavram kanıtı | Fields GLPI plugin vulnerable to RCE in dropdown generationteclib-edition · fields · CWE-20 | Kritik9,1 | — | %0,3 | 16 Mar 2026 |
35İzleyin | CVE-2026-25936İstismar yok | GLPI Vulnerable to Authenticated SQL Injectionteclib-edition · glpi · CWE-89 | Yüksek8,8 | — | %0,3 | 17 Mar 2026 |
35İzleyin | CVE-2026-22248İstismar yok | GLPI affected by Remote Code Execution via malicious uploadteclib-edition · glpi · CWE-502 | Yüksek8,8 | — | %0,3 | 11 Mar 2026 |
26İzleyin | CVE-2023-28855İstismar yok | Fields GLPI plugin vulnerable to unauthorized write access to additional fieldsteclib-edition · fields · CWE-269 | Orta6,5 | — | %0,6 | 5 Nis 2023 |
26İzleyin | CVE-2026-25937İstismar yok | GLPI has a MFA bypassteclib-edition · glpi · CWE-287 | Orta6,5 | — | %0,3 | 17 Mar 2026 |
24İzleyin | CVE-2019-12724İstismar yok | An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI.teclib-edition · news · CWE-79 | Orta6,1 | — | %1,2 | 10 Tem 2019 |
21İzleyin | CVE-2021-39190İstismar yok | SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actorteclib-edition · system center configuration manager · CWE-200 | Orta5,3 | — | %0,5 | 22 Eyl 2022 |
21İzleyin | CVE-2023-33971İstismar yok | Formcreator vulnerable to stored XSS from ##FULLFORM##teclib-edition · form creator · CWE-79 | Orta5,4 | — | %0,5 | 31 May 2023 |
14İzleyin | CVE-2018-7289Kavram kanıtı | An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2.teclib-edition · armadito antivirus · CWE-172 | Düşük3,3 | — | %1,7 | 21 Şub 2018 |
- CVE-2019-1023246Planlayın
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
KritikCVSS 9,8Kavram kanıtıEPSS %22teclib-edition · gestionnaire libre de parc informatique27 Mar 2019
- CVE-2021-4377942Planlayın
Remote Command Execution vulnerability
KritikCVSS 9,9İstismar yokEPSS %9teclib-edition · addressing5 Oca 2022
- CVE-2019-1023140Planlayın
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication.
KritikCVSS 9,8İstismar yokEPSS %2teclib-edition · gestionnaire libre de parc informatique27 Mar 2019
- CVE-2019-1272340Planlayın
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI.
KritikCVSS 9,8İstismar yokEPSS %2teclib-edition · fields10 Tem 2019
- CVE-2026-2348936İzleyin
Fields GLPI plugin vulnerable to RCE in dropdown generation
KritikCVSS 9,1Kavram kanıtıEPSS %0teclib-edition · fields16 Mar 2026
- CVE-2026-2593635İzleyin
GLPI Vulnerable to Authenticated SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0teclib-edition · glpi17 Mar 2026
- CVE-2026-2224835İzleyin
GLPI affected by Remote Code Execution via malicious upload
YüksekCVSS 8,8İstismar yokEPSS %0teclib-edition · glpi11 Mar 2026
- CVE-2023-2885526İzleyin
Fields GLPI plugin vulnerable to unauthorized write access to additional fields
OrtaCVSS 6,5İstismar yokEPSS %0teclib-edition · fields5 Nis 2023
- CVE-2026-2593726İzleyin
GLPI has a MFA bypass
OrtaCVSS 6,5İstismar yokEPSS %0teclib-edition · glpi17 Mar 2026
- CVE-2019-1272424İzleyin
An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI.
OrtaCVSS 6,1İstismar yokEPSS %1teclib-edition · news10 Tem 2019
- CVE-2021-3919021İzleyin
SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
OrtaCVSS 5,3İstismar yokEPSS %0teclib-edition · system center configuration manager22 Eyl 2022
- CVE-2023-3397121İzleyin
Formcreator vulnerable to stored XSS from ##FULLFORM##
OrtaCVSS 5,4İstismar yokEPSS %0teclib-edition · form creator31 May 2023
- CVE-2018-728914İzleyin
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2.
DüşükCVSS 3,3Kavram kanıtıEPSS %1teclib-edition · armadito antivirus21 Şub 2018