Browse CVEs

HIGH 8.8 CVE-2020-12479 TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.q… Teampass No fix yet Fix from $1,9502020-04-29 HIGH 7.5 CVE-2020-12477 The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For… Teampass No fix yet Fix from $1,9502020-04-29 HIGH 7.5 CVE-2020-12478EPSS 8% TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files. Teampass No fix yet Fix from $1,9502020-04-29 MEDIUM 6.1 CVE-2019-17205 TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of fai… Teampass No fix yet Fix from $1,6002019-10-05 MEDIUM 5.4 CVE-2019-17204 TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item. Teampass No fix yet Fix from $1,6002019-10-05 MEDIUM 5.4 CVE-2019-17203 TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder. Teampass No fix yet Fix from $1,6002019-10-05 MEDIUM 5.4 CVE-2019-16904 TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The c… Teampass No fix yet Fix from $1,6002019-09-26 MEDIUM 5.4 CVE-2019-12950 An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file w… Teampass No fix yet Fix from $1,6002019-08-06