Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-54217 1 Tobit Laboratories Ag 1 Teamdavid 2026-08-07 N/A
Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a user accesses the email, the stored cross-site scripting is triggered. This issue affects TeamDavid through Rollout 524.
CVE-2026-54218 1 Tobit Laboratories Ag 1 Teamdavid 2026-08-07 N/A
Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various files using only obfuscation. Any user with access to the server’s file system, or who can otherwise extract files from the server (see vulnerability “Random File Read”), can potentially obtain affected users’ passwords. This issue affects TeamDavid through Rollout 524.