Advisories · Technology
Tobit Laboratories AG TeamDavid.
Every CVE that names Tobit Laboratories AG TeamDavid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in link storing functionality
- Tobit Laboratories AG TeamDavid
- Server-side request forgery (SSRF)
- CWE-20
- CVSS 8.8 High
TeamDavid: Weak Cryptography and Insecure Password Storage
- Tobit Laboratories AG TeamDavid
- Hard-coded credentials
- CVSS 5.3 Medium
TeamDavid: Stored XSS in web application
- Tobit Laboratories AG TeamDavid
- CWE-20
- CVSS 5.3 Medium
TeamDavid: Reflected Cross Site Scripting (XSS) via the 'EntryInfo' parameter
- Tobit Laboratories AG TeamDavid
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
TeamDavid: Open Redirect via the 'replyUrl' parameter
- Tobit Laboratories AG TeamDavid
- Open redirect
- CVSS 5.3 Medium
TeamDavid: Header Injection through the 'cType' URL parameter
- Tobit Laboratories AG TeamDavid
- Open redirect
- CVSS 9.2 CriticalCritical · CVSS 9+
TeamDavid: Denial of Service via endpoint 'internalRestart'
- Tobit Laboratories AG TeamDavid
- Broken access control
- CVSS 9.5 CriticalCritical · CVSS 9+
TeamDavid: Buffer Overflow in JSON-parsing
- Tobit Laboratories AG TeamDavid
- Memory corruption
- CVSS 9.5 CriticalCritical · CVSS 9+
TeamDavid: Buffer Overflow in multiple form data parameters
- Tobit Laboratories AG TeamDavid
- Memory corruption
- CVSS 9.5 CriticalCritical · CVSS 9+
TeamDavid: Buffer Overflow in file names of file upload functionalities
- Tobit Laboratories AG TeamDavid
- Memory corruption
- CVSS 8.9 High
TeamDavid: Buffer Overflow in 'editini' function
- Tobit Laboratories AG TeamDavid
- Memory corruption
- CVSS 8.5 High
TeamDavid: Arbitrary File Write leading to Stored XSS
- Tobit Laboratories AG TeamDavid
- Broken access control
- CWE-20
- CVSS 6.3 Medium
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in move archive functionality
- Tobit Laboratories AG TeamDavid
- Server-side request forgery (SSRF)
- CWE-20
- CVSS 6.3 Medium
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sending functionality
- Tobit Laboratories AG TeamDavid
- Server-side request forgery (SSRF)
- CWE-20
- CVSS 7.7 High
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality
- Tobit Laboratories AG TeamDavid
- Server-side request forgery (SSRF)
- CWE-20
- CVSS 9.2 CriticalCritical · CVSS 9+
TeamDavid: Memory Leak leaking sensitive information
- Tobit Laboratories AG TeamDavid
- Information disclosure
- CVSS 8.5 High
TeamDavid: Path Traversal in the archive creation functionality
- Tobit Laboratories AG TeamDavid
- Path traversal
- CVSS 6.9 Medium
TeamDavid: Missing Authorization
- Tobit Laboratories AG TeamDavid
- Broken access control
- CVSS 8.4 High
TeamDavid: Local File Inclusion via the form field 'scjob'
- Tobit Laboratories AG TeamDavid
- Path traversal
- CVSS 5.3 Medium
TeamDavid: Header Injection through request body in link storing functionality
- Tobit Laboratories AG TeamDavid
- CWE-20
- CVSS 5.3 Medium
TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters
- Tobit Laboratories AG TeamDavid
- Open redirect
- CVSS 8.4 High
TeamDavid: Arbitrary File Deletion via form field 'scjob'
- Tobit Laboratories AG TeamDavid
- Path traversal