GitLab EE Access Rights Data Compromise

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...

PT-2024-34392 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: TeamPass versions prior to 3.1.3.1 Description: The issue arises when retrieving information about access rights for a folder. TeamPass does not properly check whether a folder is in a user's allowed folders list that has been defined by an...

CVE-2024-50701

Summary : CVE-2024-50701 affects TeamPass prior to 3.1.3.1. The vulnerability arises when retrieving folder access rights, where the system does not properly verify whether a folder belongs to the user’s admin-defined allowed folders list. Affected software : nilsteampassnet/teampass (TeamPass) p...

CVE-2006-7202: Undefined Security Weakness

The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors...