56 matches found
CVE-2023-2859 Code Injection in nilsteampassnet/teampass
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-2591
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
CVE-2023-2591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
Cross Site Scripting in nilsteampassnet/teampass
nilsteampassnet/teampass prior to version 3.0.7 is vulnerable to cross site scripting XSS from item names within a folder...
CVE-2023-2516
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
CVE-2023-2516 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3...
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3...
CVE-2023-2021
CVE-2023-2021 concerns a stored Cross-site Scripting (XSS) vulnerability in TeamPass (nilsteampassnet/teampass) prior to version 3.0.3. The issue arises from unsanitized input in the folder description parameter, allowing injection of scripts that run in a victim’s browser when the affected conte...
Sql injection
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
CVE-2023-1545 SQL Injection in nilsteampassnet/teampass
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
CVE-2023-1545
CVE-2023-1545 affects Teampass (nilsteampassnet/teampass) prior to 3.0.0.23, where an SQL Injection vulnerability exists in the application flow described by public advisories. The connected documents provide concrete technical details: PoCs and public exploits exist for Teampass versions around ...
CVE-2023-1463 Authorization Bypass Through User-Controlled Key in nilsteampassnet/teampass
Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
Cross-site Scripting (XSS)
nilsteampassnet/TeamPass is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of password is not sanitized when displayed in a preview from a search result...