A vulnerability was found in Enalean Tuleap Open ALM (the affected version unknown). It has been classified as critical. This affects an unknown functionality of the component Personal Dashboard. Upgrading eliminates this vulnerability. Applying the patch 91535add59f4b3a04b6b8eab123c002cd5af180d is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.
Enalean Tuleap Open ALM Personal Dashboard sql injection [CVE-2021-41148]
- Virtual Patching
- October 15, 2021
- 6:05 pm
CVE-2024-49592 : MCAFEE TRIAL INSTALLER 16.0.53 ACCESS CONTROL
Description McAfee Trial Installer 16.0.53 has Incorrect Access Control that leads to Local Escalation of Privileges. References https://www.mcafee.com/support/s/article/000002516?language=en_US For More
CVE-2024-10934 : OPENBSD UP TO 7.4 ERRATA 020/7.5 ERRATA 007 NFS CLIENT/NFS SERVER DOUBLE FREE
Description In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS
CVE-2024-40638 : GLPI UP TO 10.0.16 SQL INJECTION
Description GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities.