CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 30/12/2024 |
| CVE-2024-50702 | MEDIO5.3 | TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager. | 30/12/2024 |
| CVE-2024-50701 | MEDIO4.3 | TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin. | 30/12/2024 |
| CVE-2023-3565 | MEDIO5.4 | Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 10/07/2023 |
| CVE-2023-3553 | ALTO7.5 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3552 | MEDIO5.4 | Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3551 | ALTO7.2 | Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3531 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 06/07/2023 |
| CVE-2023-3191 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 10/06/2023 |
| CVE-2023-3190 | MEDIO4.6 | Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 10/06/2023 |
| CVE-2023-3095 | MEDIO6.5 | Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 04/06/2023 |
| CVE-2023-3086 | CRÍTICO9.0 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3084 | ALTO8.1 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3083 | ALTO8.7 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3009 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 31/05/2023 |
| CVE-2023-2859 | ALTO8.8 | Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 24/05/2023 |
| CVE-2023-2591 | MEDIO5.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7. | 09/05/2023 |
| CVE-2023-2516 | MEDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7. | 05/05/2023 |