nilsteampassnet

Records50All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

nilsteampassnet records in CISA KEV

No nilsteampassnet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Teampass 50 records HIGH

Records

50 records

TI-2023-02892 CVE-2023-3086 · GHSA-j245-v2mh-5h6f

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

HIGH 74

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00909 Published 2023-06-03 Fixed in 3.0.9 CWE-79

TI-2023-03315 CVE-2023-3553 · GHSA-2rhg-hqq9-8xjh

Exposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass

HIGH 72

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00828 Published 2023-07-08 Fixed in 3.0.10 CWE-200

TI-2023-01459 CVE-2023-1545 · GHSA-ppxm-q2h4-v7mm

SQL Injection in nilsteampassnet/teampass

HIGH 72

SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08354 Published 2023-03-21 Fixed in 3.0.0.23, 3.0.0.22 CWE-89

TI-2023-02679 CVE-2023-2859 · GHSA-h6jh-cf83-qcq5

Code Injection in nilsteampassnet/teampass

HIGH 71

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01649 Published 2023-05-24 Fixed in 3.0.9 CWE-94

TI-2023-03313 CVE-2023-3551 · GHSA-97hm-2mfr-2p97

Code Injection in nilsteampassnet/teampass

HIGH 67

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01137 Published 2023-07-08 Fixed in 3.0.10 CWE-94

TI-2023-01013 CVE-2023-1070 · GHSA-x36g-4629-xp9v

External Control of File Name or Path in nilsteampassnet/teampass

MEDIUM 64

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00823 Published 2023-02-27 Fixed in 3.0.0.22, 3.0.0.23 CWE-73

TI-2023-02901 CVE-2023-3095 · GHSA-g3jr-6vj4-3x82

Improper Access Control in nilsteampassnet/teampass

MEDIUM 62

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00381 Published 2023-06-04 Fixed in 3.0.9 CWE-284

TI-2023-03295 CVE-2023-3531 · GHSA-pwrw-g29q-3mp8

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00537 Published 2023-07-06 Fixed in 3.0.10 CWE-79

TI-2023-03327 CVE-2023-3565 · GHSA-524r-w8fx-hqg3

Cross-site Scripting (XSS) - Generic in nilsteampassnet/teampass

MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00625 Published 2023-07-08 Fixed in 3.0.10 CWE-79

TI-2023-03314 CVE-2023-3552 · GHSA-2cv5-qvq3-6276

Improper Encoding or Escaping of Output in nilsteampassnet/teampass

MEDIUM 58

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00541 Published 2023-07-08 Fixed in 3.0.10 CWE-116

TI-2023-02421 CVE-2023-2591 · GHSA-prj5-2g2p-x2mw

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass

MEDIUM 58

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00607 Published 2023-05-09 Fixed in 3.0.7 CWE-79

TI-2023-02358 CVE-2023-2516 · GHSA-2ffp-w665-9mgx

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00612 Published 2023-05-05 Fixed in 3.0.7 CWE-79

TI-2023-01898 CVE-2023-2021 · GHSA-4h2q-84w7-4mhx

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00363 Published 2023-04-13 Fixed in 3.0.3 CWE-79

TI-2023-01382 CVE-2023-1463 · GHSA-86jq-pwgx-6vrq

Authorization Bypass Through User-Controlled Key in nilsteampassnet/teampass

MEDIUM 58

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00523 Published 2023-03-17 Fixed in 3.0.0.23 CWE-639

TI-2023-02988 CVE-2023-3190 · GHSA-p7xm-g427-jxfc

Improper Encoding or Escaping of Output in nilsteampassnet/teampass

MEDIUM 54

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00522 Published 2023-06-10 Fixed in 3.0.9 CWE-116

TI-2015-06291 CVE-2015-7564 · GHSA-r64j-5w3w-fp49

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote…

MEDIUM 48

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03388 Published 2017-04-12 Fixed in 2.1.25 CWE-89

TI-2026-02684 CVE-2026-3107 · GHSA-65q8-p76v-6qj6

Multiple vulnerabilities in Teampass

MEDIUM 47

Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/index.php?page=items'.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00139 Published 2026-03-31 Fixed in 3.1.5.24 CWE-79

TI-2026-02683 CVE-2026-3106 · GHSA-v5c3-292h-hqp3

Multiple vulnerabilities in Teampass

MEDIUM 47

Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/index.php'.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00159 Published 2026-03-31 No fix listed CWE-79

TI-2019-15818 CVE-2019-1000001 · GHSA-q9qr-h33g-fw3j

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format…

MEDIUM 46

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01724 Published 2019-02-04 No fix listed CWE-522

TI-2020-09978 CVE-2020-12478 · GHSA-83h6-22cp-f22w

TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass…

MEDIUM 44

TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08552 Published 2020-04-29 No fix listed CWE-306

TI-2017-06848 CVE-2017-9436 · GHSA-cm26-gp8j-w6xf

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

MEDIUM 44

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01044 Published 2017-06-05 Fixed in 2.1.27.5 CWE-89

TI-2015-06290 CVE-2015-7563 · GHSA-fj26-728m-wf6h

Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows…

MEDIUM 44

Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an authenticated user.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03127 Published 2017-04-12 No fix listed CWE-352

TI-2020-09979 CVE-2020-12479 · GHSA-6jf9-8m34-96w5

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include…

MEDIUM 43

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02575 Published 2020-04-29 No fix listed CWE-22

TI-2023-02889 CVE-2023-3083 · GHSA-c6fv-3jm9-6r8f

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

MEDIUM 41

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00738 Published 2023-06-03 Fixed in 3.0.9 CWE-79

TI-2023-02890 CVE-2023-3084 · GHSA-8vm8-38pc-8xhh

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

LOW 39

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00841 Published 2023-06-03 Fixed in 3.0.9 CWE-79

Open these records in search →