CVE-2026-22675 | Medium | 5.4 | 2026-04-06 | OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary… |
CVE-2023-3726 | Medium | 6.9 | 2024-01-04 | OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting. |
CVE-2018-15537 | High | 8.8 | 2018-11-29 | Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP req… |
CVE-2018-14857 | High | 8.8 | 2018-08-06 | Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 a… |
CVE-2018-14473 | Critical | 9.1 | 2018-08-04 | OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attacker sending a craft… |
CVE-2018-12483 | High | 8.8 | 2018-08-04 | OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GE… |
CVE-2018-12482 | High | 8.8 | 2018-08-04 | OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues. |
CVE-2018-1000558 | Medium | 6.5 | 2018-06-26 | OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An authentic… |
CVE-2018-1000557 | Medium | 6.1 | 2018-06-26 | OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can resul… |
CVE-2014-4722 | | | 2014-07-07 | Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script… |
CVE-2011-4024 | | | 2011-10-21 | Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML v… |
CVE-2010-1733 | | | 2010-05-06 | Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fi… |
CVE-2010-1595 | | | 2010-04-28 | Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1)… |
CVE-2010-1594 | | | 2010-04-28 | Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or… |
CVE-2009-3042 | | | 2009-09-01 | SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands vi… |
CVE-2009-3040 | | | 2009-09-01 | Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands… |
CVE-2009-0667 | | | 2009-07-09 | Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain… |
CVE-2009-2166 | | | 2009-06-22 | Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname… |
CVE-2009-1769 | | | 2009-05-22 | The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a use… |
CVE-2009-1443 | | | 2009-04-27 | Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors. |