| CVE-2024-50703 | ALTO8.1 | TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id. | 30/12/2024 |
| CVE-2024-50702 | MEDIO5.3 | TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager. | 30/12/2024 |
| CVE-2024-50701 | MEDIO4.3 | TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin. | 30/12/2024 |
| CVE-2023-3565 | MEDIO5.4 | Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 10/07/2023 |
| CVE-2023-3553 | ALTO7.5 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3552 | MEDIO5.4 | Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3551 | ALTO7.2 | Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3531 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 06/07/2023 |
| CVE-2023-3191 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 10/06/2023 |
| CVE-2023-3190 | MEDIO4.6 | Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 10/06/2023 |
| CVE-2023-3095 | MEDIO6.5 | Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 04/06/2023 |
| CVE-2023-3086 | CRÍTICO9.0 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3084 | ALTO8.1 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3083 | ALTO8.7 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3009 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 31/05/2023 |
| CVE-2023-2859 | ALTO8.8 | Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 24/05/2023 |
| CVE-2023-2591 | MEDIO5.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7. | 09/05/2023 |
| CVE-2023-2516 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7. | 05/05/2023 |
| CVE-2023-2021 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3. | 13/04/2023 |
| CVE-2023-1545 | ALTO7.5 | SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23. | 21/03/2023 |