What’s Vulnerable › Products

Tobit Laboratories AG TeamDavid vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.

Check whether your Tobit Laboratories AG TeamDavid version is affected

Latest Tobit Laboratories AG TeamDavid vulnerabilities

• CVE-2026-54218 — TeamDavid: Weak Cryptography and Insecure Password Storage (CVSS 8.8)
• CVE-2026-54217 — TeamDavid: Stored XSS in web application (CVSS 5.3)
• CVE-2026-54216 — TeamDavid: Reflected Cross Site Scripting (XSS) via the 'EntryInfo' parameter (CVSS 5.3)
• CVE-2026-54215 — TeamDavid: Open Redirect via the 'replyUrl' parameter (CVSS 5.3)
• CVE-2026-54214 — TeamDavid: Header Injection through the 'cType' URL parameter (CVSS 5.3)
• CVE-2026-54213 — TeamDavid: Denial of Service via endpoint 'internalRestart' (CVSS 9.2)
• CVE-2026-54212 — TeamDavid: Buffer Overflow in JSON-parsing (CVSS 9.5)
• CVE-2026-54211 — TeamDavid: Buffer Overflow in multiple form data parameters (CVSS 9.5)
• CVE-2026-54210 — TeamDavid: Buffer Overflow in file names of file upload functionalities (CVSS 9.5)
• CVE-2026-54209 — TeamDavid: Buffer Overflow in 'editini' function (CVSS 8.9)
• CVE-2026-54208 — TeamDavid: Arbitrary File Write leading to Stored XSS (CVSS 8.5)
• CVE-2026-54207 — TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in move archive functionality (CVSS 6.3)
• CVE-2026-54206 — TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sending functionality (CVSS 6.3)
• CVE-2026-54205 — TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in link storing functionality (CVSS 6.3)
• CVE-2026-54204 — TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality (CVSS 7.7)
• CVE-2026-54203 — TeamDavid: Memory Leak leaking sensitive information (CVSS 9.2)
• CVE-2026-54202 — TeamDavid: Path Traversal in the archive creation functionality (CVSS 8.5)
• CVE-2026-54201 — TeamDavid: Missing Authorization (CVSS 6.9)
• CVE-2026-54200 — TeamDavid: Local File Inclusion via the form field 'scjob' (CVSS 8.4)
• CVE-2026-54199 — TeamDavid: Header Injection through request body in link storing functionality (CVSS 5.3)
• CVE-2026-12071 — TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters (CVSS 5.3)
• CVE-2026-12070 — TeamDavid: Arbitrary File Deletion via form field 'scjob' (CVSS 8.4)