İçeriğe atla
Noroxi

TeamPass kayıtları

teampass üreticisine ait 50 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%62
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 22
  5. 23
  6. 24
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

50 kayıt
  • CVE-2015-7564
    40Planlayın

    Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) i

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    teampass · teampass12 Nis 2017

  • CVE-2019-1000001
    40Planlayın

    TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can re

    KritikCVSS 9,8İstismar yokEPSS %2

    teampass · teampass4 Şub 2019

  • CVE-2017-9436
    39İzleyin

    TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    teampass · teampass5 Haz 2017

  • CVE-2026-3106
    37İzleyin

    Multiple vulnerabilities in Teampass

    KritikCVSS 9,3İstismar yokEPSS %0

    teampass · teampass31 Mar 2026

  • CVE-2026-3107
    37İzleyin

    Multiple vulnerabilities in Teampass

    KritikCVSS 9,3İstismar yokEPSS %0

    teampass · teampass31 Mar 2026

  • CVE-2015-7563
    36İzleyin

    Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an au

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    teampass · teampass12 Nis 2017

  • CVE-2020-12479
    36İzleyin

    TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with source

    YüksekCVSS 8,8İstismar yokEPSS %3

    teampass · teampass29 Nis 2020

  • CVE-2023-3086
    36İzleyin

    Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

    KritikCVSS 9,0İstismar yokEPSS %1

    teampass · teampass3 Haz 2023

  • CVE-2023-2859
    35İzleyin

    Code Injection in nilsteampassnet/teampass

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    teampass · teampass24 May 2023

  • CVE-2023-3083
    34İzleyin

    Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

    YüksekCVSS 8,7İstismar yokEPSS %1

    teampass · teampass3 Haz 2023

  • CVE-2020-12478
    33İzleyin

    TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root.

    YüksekCVSS 7,5Kavram kanıtıEPSS %9

    teampass · teampass29 Nis 2020

  • CVE-2023-1545
    33İzleyin

    SQL Injection in nilsteampassnet/teampass

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    teampass · teampass21 Mar 2023

  • CVE-2020-11671
    32İzleyin

    Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become

    YüksekCVSS 8,1İstismar yokEPSS %1

    teampass · teampass4 May 2020

  • CVE-2017-15055
    32İzleyin

    TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php.

    YüksekCVSS 8,1İstismar yokEPSS %1

    teampass · teampass27 Kas 2017

  • CVE-2023-3084
    32İzleyin

    Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

    YüksekCVSS 8,1İstismar yokEPSS %1

    teampass · teampass3 Haz 2023

  • CVE-2024-50703
    32İzleyin

    TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.

    YüksekCVSS 8,1İstismar yokEPSS %0

    teampass · teampass30 Ara 2024

  • CVE-2017-15054
    31İzleyin

    An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files lea

    YüksekCVSS 7,5İstismar yokEPSS %3

    teampass · teampass27 Kas 2017

  • CVE-2014-3772
    31İzleyin

    TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a fi

    YüksekCVSS 7,5İstismar yokEPSS %3

    teampass · teampass7 Ağu 2014

  • CVE-2014-3771
    31İzleyin

    TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via the language file path in a (1) request to index.php or (2)

    YüksekCVSS 7,5İstismar yokEPSS %3

    teampass · teampass7 Ağu 2014

  • CVE-2014-3773
    31İzleyin

    Multiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to execute arbitrary SQL commands via the login para

    YüksekCVSS 7,5İstismar yokEPSS %2

    teampass · teampass7 Ağu 2014

  • CVE-2020-12477
    31İzleyin

    The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forw

    YüksekCVSS 7,5İstismar yokEPSS %2

    teampass · teampass29 Nis 2020

  • CVE-2023-3553
    30İzleyin

    Exposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass

    YüksekCVSS 7,5İstismar yokEPSS %1

    teampass · teampass8 Tem 2023

  • CVE-2023-3551
    28İzleyin

    Code Injection in nilsteampassnet/teampass

    YüksekCVSS 7,2İstismar yokEPSS %1

    teampass · teampass8 Tem 2023

  • CVE-2023-1070
    28İzleyin

    External Control of File Name or Path in nilsteampassnet/teampass

    YüksekCVSS 7,1İstismar yokEPSS %1

    teampass · teampass27 Şub 2023

  • CVE-2023-3095
    26İzleyin

    Improper Access Control in nilsteampassnet/teampass

    OrtaCVSS 6,5İstismar yokEPSS %0

    teampass · teampass4 Haz 2023