Skip to content
Noroxi

TeamPass records

50 published records for vendor teampass.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
62%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 20
  4. 22
  5. 23
  6. 24
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

50 records
  • CVE-2015-7564
    40Plan

    Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) i

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    teampass · teampassApr 12, 2017

  • CVE-2019-1000001
    40Plan

    TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can re

    CriticalCVSS 9.8No exploitEPSS 1%

    teampass · teampassFeb 4, 2019

  • CVE-2017-9436
    39Monitor

    TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    teampass · teampassJun 5, 2017

  • CVE-2026-3106
    37Monitor

    Multiple vulnerabilities in Teampass

    CriticalCVSS 9.3No exploitEPSS 0%

    teampass · teampassMar 31, 2026

  • CVE-2026-3107
    37Monitor

    Multiple vulnerabilities in Teampass

    CriticalCVSS 9.3No exploitEPSS 0%

    teampass · teampassMar 31, 2026

  • CVE-2015-7563
    36Monitor

    Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an au

    HighCVSS 8.8Proof of conceptEPSS 3%

    teampass · teampassApr 12, 2017

  • CVE-2020-12479
    36Monitor

    TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with source

    HighCVSS 8.8No exploitEPSS 2%

    teampass · teampassApr 29, 2020

  • CVE-2023-3086
    36Monitor

    Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

    CriticalCVSS 9.0No exploitEPSS 0%

    teampass · teampassJun 3, 2023

  • CVE-2023-2859
    35Monitor

    Code Injection in nilsteampassnet/teampass

    HighCVSS 8.8Proof of conceptEPSS 1%

    teampass · teampassMay 24, 2023

  • CVE-2023-3083
    34Monitor

    Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

    HighCVSS 8.7No exploitEPSS 0%

    teampass · teampassJun 3, 2023

  • CVE-2020-12478
    33Monitor

    TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root.

    HighCVSS 7.5Proof of conceptEPSS 8%

    teampass · teampassApr 29, 2020

  • CVE-2023-1545
    33Monitor

    SQL Injection in nilsteampassnet/teampass

    HighCVSS 7.5Proof of conceptEPSS 8%

    teampass · teampassMar 21, 2023

  • CVE-2020-11671
    32Monitor

    Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become

    HighCVSS 8.1No exploitEPSS 1%

    teampass · teampassMay 4, 2020

  • CVE-2017-15055
    32Monitor

    TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php.

    HighCVSS 8.1No exploitEPSS 1%

    teampass · teampassNov 27, 2017

  • CVE-2023-3084
    32Monitor

    Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

    HighCVSS 8.1No exploitEPSS 0%

    teampass · teampassJun 3, 2023

  • CVE-2024-50703
    32Monitor

    TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.

    HighCVSS 8.1No exploitEPSS 0%

    teampass · teampassDec 30, 2024

  • CVE-2017-15054
    31Monitor

    An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files lea

    HighCVSS 7.5No exploitEPSS 3%

    teampass · teampassNov 27, 2017

  • CVE-2014-3772
    31Monitor

    TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a fi

    HighCVSS 7.5No exploitEPSS 2%

    teampass · teampassAug 7, 2014

  • CVE-2014-3771
    31Monitor

    TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via the language file path in a (1) request to index.php or (2)

    HighCVSS 7.5No exploitEPSS 2%

    teampass · teampassAug 7, 2014

  • CVE-2014-3773
    31Monitor

    Multiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to execute arbitrary SQL commands via the login para

    HighCVSS 7.5No exploitEPSS 2%

    teampass · teampassAug 7, 2014

  • CVE-2020-12477
    31Monitor

    The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forw

    HighCVSS 7.5No exploitEPSS 1%

    teampass · teampassApr 29, 2020

  • CVE-2023-3553
    30Monitor

    Exposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass

    HighCVSS 7.5No exploitEPSS 0%

    teampass · teampassJul 8, 2023

  • CVE-2023-3551
    28Monitor

    Code Injection in nilsteampassnet/teampass

    HighCVSS 7.2No exploitEPSS 1%

    teampass · teampassJul 8, 2023

  • CVE-2023-1070
    28Monitor

    External Control of File Name or Path in nilsteampassnet/teampass

    HighCVSS 7.1No exploitEPSS 0%

    teampass · teampassFeb 27, 2023

  • CVE-2023-3095
    26Monitor

    Improper Access Control in nilsteampassnet/teampass

    MediumCVSS 6.5No exploitEPSS 0%

    teampass · teampassJun 4, 2023