50 matches found
PT-2023-21465 · Bitwarden · Bitwarden
Name of the Vulnerable Software and Affected Versions: Bitwarden versions through 2023.2.1 Description: The issue allows password auto-fill when the second-level domain matches. For example, a password stored for an example.com hosting provider will be auto-filled when visiting...
CVE-2023-27974
Bitwarden (versions up to 2023.2.1) is affected by a domain-matching password autofill issue: when visiting a subdomain like customer-website.example.com, a stored password for example.com may be auto-filled due to second-level domain matching. The vendor notes that “Auto-fill on page load” is no...
CVE-2023-27974
Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com is visited. NOTE: the vendor's position is that "Auto-fill on page load" is not enabled by default...
CVE-2023-27974
Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com is visited. NOTE: the vendor's position is that "Auto-fill on page load" is not enabled by default...
CVE-2022-30740
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
CVE-2022-30740
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
Input validation
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
CVE-2022-30740
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
CVE-2022-30740
CVE-2022-30740 describes an improper auto-fill algorithm in Samsung Internet o n Android prior to version 17.0.1.69 that can allow a physical attacker to guess stored credit card numbers. The vulnerability originates from how autofill data is managed, enabling local/physical access exploitation w...
CVE-2022-28795
A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...
CVE-2022-28795
A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...
Avira Password Manager Browser Extensions 安全漏洞
Avira Password Manager Browser Extensions is a password management software by Little Red Umbrella, which is designed for chrome and can also be used on edge browsers to ensure that users can manage their passwords on the web. A security vulnerability exists in Avira Password Manager Browser...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc USA. Google Chrome suffers from a resource management error vulnerability that stems from the use of after in auto-fill free...
Hitachi ABB Power Grids eSOMS 安全漏洞
Hitachi ABB Power Grids eSOMS is an application from Hitachi ABB Power Grids. a shift operations management system for the power generation industry. A security vulnerability exists in Hitachi ABB Power Grids eSOMS that stems from a password auto-fill vulnerability in the password field of the...
The vulnerability of the Auto-Fill function in the Google Chrome browser allows a hacker to gain access to confidential data.
The vulnerability of the Auto-Fill function in Google Chrome is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the Auto-Fill function in the Google Chrome browser allows a hacker to gain access to confidential data.
The vulnerability of the Auto-Fill function in Google Chrome relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...
MTN Group: Weak/Auto Fill Password
Summary: https://mtnc-selfservice.mtncameroon.net The following url has admin/admin as user name and password Steps To Reproduce: 1. open the url in any browser of your choice 1. enter admin as user name and password 1. booom .... full asset to super admin full panel Supporting Material/Reference...
Apple SafarS and iOS Safari Login AutoFill Information Disclosure Vulnerability
Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Safari Login AutoFill is one of the auto-fill field component. A security...
The vulnerability of Google Chrome’s browser auto-filling mechanism, which allows a hacker to perform reading beyond the memory limit
The vulnerability of the browser-based credit card data filling mechanism in Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to read data beyond the memory limit, using a specially crafted HTML page...