Browse CVEs

MEDIUM 6.5 CVE-2025-25478 The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disc… Syspass after 3.2.11 Fix from $1,6002025-02-28 MEDIUM 5.4 CVE-2025-25476 A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Javascript c… Syspass after 3.2.11 Fix from $1,6002025-02-28 HIGH 8.1 CVE-2025-25477 A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed … Syspass after 3.2.11 Fix from $1,9502025-02-28 MEDIUM 6.1 CVE-2024-42904 A cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload… Syspass after 3.2.11 Fix from $1,6002024-09-03 MEDIUM 5.4 CVE-2022-4930 A vulnerability classified as problematic was found in nuxsmin sysPass up to 3.2.4. Affected by this vulnerability is an unknown functionality of the… Syspass after 3.2.4 Fix from $1,6002023-03-06 MEDIUM 6.1 CVE-2017-9306 inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as demonstrated by use of an "<svg/onload=" substring i… Syspass No fix yet Fix from $1,6002017-05-31 HIGH 7.5 CVE-2017-5999 An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core… Syspass Patch available Fix from $1,9502017-03-06