Tobit Laboratories AG TeamDavid

• CVE-2026-54205 Medium 6.3 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in link storing functionality 0.5%
• CVE-2026-54218 High 8.8 TeamDavid: Weak Cryptography and Insecure Password Storage 0.5%
• CVE-2026-54217 Medium 5.3 TeamDavid: Stored XSS in web application 0.4%
• CVE-2026-54216 Medium 5.3 TeamDavid: Reflected Cross Site Scripting (XSS) via the 'EntryInfo' parameter 0.5%
• CVE-2026-54215 Medium 5.3 TeamDavid: Open Redirect via the 'replyUrl' parameter 0.5%
• CVE-2026-54214 Medium 5.3 TeamDavid: Header Injection through the 'cType' URL parameter 0.5%
• CVE-2026-54213 Critical 9.2 TeamDavid: Denial of Service via endpoint 'internalRestart' 0.7%
• CVE-2026-54212 Critical 9.5 TeamDavid: Buffer Overflow in JSON-parsing 0.7%
• CVE-2026-54211 Critical 9.5 TeamDavid: Buffer Overflow in multiple form data parameters 0.6%
• CVE-2026-54210 Critical 9.5 TeamDavid: Buffer Overflow in file names of file upload functionalities 0.7%
• CVE-2026-54209 High 8.9 TeamDavid: Buffer Overflow in 'editini' function 0.4%
• CVE-2026-54208 High 8.5 TeamDavid: Arbitrary File Write leading to Stored XSS 0.5%
• CVE-2026-54207 Medium 6.3 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in move archive functionality 0.5%
• CVE-2026-54206 Medium 6.3 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sending functionality 0.5%
• CVE-2026-54204 High 7.7 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality 0.6%
• CVE-2026-54203 Critical 9.2 TeamDavid: Memory Leak leaking sensitive information 0.6%
• CVE-2026-54202 High 8.5 TeamDavid: Path Traversal in the archive creation functionality 0.5%
• CVE-2026-54201 Medium 6.9 TeamDavid: Missing Authorization 0.6%
• CVE-2026-54200 High 8.4 TeamDavid: Local File Inclusion via the form field 'scjob' 0.4%
• CVE-2026-54199 Medium 5.3 TeamDavid: Header Injection through request body in link storing functionality 0.4%
• CVE-2026-12071 Medium 5.3 TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters 0.5%
• CVE-2026-12070 High 8.4 TeamDavid: Arbitrary File Deletion via form field 'scjob' 0.4%