CVE-2019-17204

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

CVE-2019-17205

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2019-17203

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

CVE-2019-17203

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2019-17203

CVE-2019-17203 affects TeamPass 2.1.27.36 and enables Stored XSS on the Search page when a crafted password is used for an item in any folder. Root cause noted in sources as the password value not being sanitized when shown in a search preview; no remediation details are provided in the supplied ...

CVE-2019-17203

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

CVE-2019-17204

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

CVE-2019-17204

CVE-2019-17204 affects TeamPass 2.1.27.36 and is a Stored XSS vulnerability triggered by setting a crafted Knowledge Base label and adding any available item. The root cause, per Veracode, is that the values stored in the label field were not sanitized, enabling script execution in the victim’s b...

CVE-2019-17205

The CVE-2019-17205 entry affects TeamPass 2.1.27.36 and describes a Stored XSS vulnerability: an attacker can place an XSS payload in the username field during login, with the payload executing when an administrator views the log of failed logins. This is the concrete vulnerability described acro...

CVE-2019-17205

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2019-16904

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...

CVE-2019-16904

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...

CVE-2019-16904

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...

CVE-2019-16904

TeamPass 2.1.27.36 contains a Stored XSS vulnerability: by setting a crafted password for an item in a shared/folder item, an admin or user can trigger XSS when viewing the item’s change history or tapping the item. This is documented across multiple sources (Red Hat, GHSA, osv). The core issue i...

TeamPass <= 2.1.27.36 Multiple XSS Vulnerabilities

TeamPass is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TeamPass Cross-Site Scripting Vulnerability (CNVD-2020-16615)

TeamPass is an open source password manager. A cross-site scripting vulnerability exists in TeamPass version 2.1.27.35, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute client-side code...