Known vulnerabilities in TeamPass

Software: TeamPass
Software CPE: cpe:2.3:a:nils_laumaillé:teampass:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamPass TeamPass is affected by 46 known vulnerabilities: 5 high, 21 medium, 20 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.2.0.0 03.08.2026 SB2026080205
#VU140791 - Incorrect Comparison
CWE-697 Low
No
No
3.2.0.0 03.08.2026 SB2026080205
#VU140790 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-915 Medium
No
No
3.2.0.6 03.08.2026 SB2026080207
#VU140789 - Improper Authentication
CWE-287 Medium
No
No
3.2.0.6 03.08.2026 SB2026080207
#VU140788 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Low
No
No
3.2.0.6 03.08.2026 SB2026080207
#VU140787 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
3.2.0.6 03.08.2026 SB2026080207
#VU140734 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
3.2.0.6 02.08.2026 SB2026080207
#VU140735 - Observable discrepancy
CWE-203 Medium
No
No
3.2.0.6 02.08.2026 SB2026080207
#VU140733 - Weak password recovery mechanism
CWE-640 Medium
No
No
3.2.0.6 02.08.2026 SB2026080207
#VU140732 - Incorrect Authorization
CWE-863 Medium
No
No
3.2.0.6 02.08.2026 SB2026080207
#VU140731 - Improper Privilege Management
CWE-269 Medium
No
No
3.2.0.6 02.08.2026 SB2026080207
#VU140730 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
3.2.0.6 02.08.2026 SB2026080207
#VU140729 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
3.2.0.6 02.08.2026 SB2026080207
#VU140728 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.2.0.6 02.08.2026 SB2026080207
#VU140727 - Missing Authorization
CWE-862 Low
No
No
3.2.0.9 02.08.2026 SB2026080206
#VU140725 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
3.2.0.0 02.08.2026 SB2026080205
#VU140726 - Missing Authorization
CWE-862 Low
No
No
3.2.0.0 02.08.2026 SB2026080205
#VU140724 - Missing Authorization
CWE-862 Medium
No
No
3.2.1.2 02.08.2026 SB2026080204
#VU76658 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2591
CWE-79 Medium
No
No
3.0.7 30.05.2023 SB2023053063
#VU76657 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2859
CWE-79 Low
No
No
3.0.9 30.05.2023 SB2023053058
SB2023053064


Showing elements 1 - 20 out of 46