Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:31 a.m.4 views

CVE-2019-16371

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

8.2CVSS6.8AI score0.00262EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7128

Malware in sbrugna...

8.2CVSS8.1AI score0.00262EPSS
Exploits1References2
OSV
OSV
added 2020/12/12 7:15 p.m.1 views

CVE-2020-35208

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authentica...

5.7CVSS6.2AI score
Exploits0References2
Prion
Prion
added 2020/12/12 7:15 p.m.25 views

Authentication flaw

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authentica...

3.3CVSS5.9AI score0.00035EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2020/12/12 7:15 p.m.15 views

Authentication flaw

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate wi...

3.3CVSS5.8AI score0.00035EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/12/12 6:7 p.m.10 views

CVE-2020-35207

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate wi...

5.8AI score0.00035EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2020/12/12 6:7 p.m.9 views

CVE-2020-35208

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authentica...

7.6AI score0.00035EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2020/12/12 12:0 a.m.1 views

PT-2020-17292 · Logmein · Logmein Lastpass Password Manager

Name of the Vulnerable Software and Affected Versions: LogMein LastPass Password Manager version 4.8.11.2403 Description: An issue was discovered in the LogMein LastPass Password Manager app for iOS, where the PIN authentication for unlocking can be bypassed by forcing the authentication result t...

5.7CVSS7.2AI score0.00035EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2020/12/12 12:0 a.m.2 views

PT-2020-17293 · Logmein · Logmein Lastpass Password Manager

Name of the Vulnerable Software and Affected Versions: LogMein LastPass Password Manager version 4.8.11.2403 Description: An issue was discovered in the LogMein LastPass Password Manager app for iOS, where the password authentication for unlocking can be bypassed by forcing the authentication...

5.7CVSS7.3AI score0.00035EPSS
Exploits1References4
Prion
Prion
added 2019/09/16 6:15 p.m.20 views

Design/Logic Flaw

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

5.8CVSS8AI score0.00262EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/09/16 5:56 p.m.10 views

CVE-2019-16371

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

8.1AI score0.00262EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/16 12:0 a.m.3 views

Unspecified Vulnerability in LogMeIn LastPass

LogMeIn LastPass is a cross-platform online password management tool from LogMeIn USA. A security vulnerability exists in LogMeIn LastPass versions prior to 4.33.0. An attacker could exploit the vulnerability by building a specially crafted website to capture credentials for user accounts...

8.2CVSS6.8AI score0.00262EPSS
Exploits1References1
Prion
Prion
added 2018/04/18 12:29 a.m.13 views

Hardcoded credentials

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service browser hang via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements...

5CVSS7.4AI score0.01482EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2018/04/18 12:29 a.m.11 views

CVE-2018-10193

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service browser hang via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements...

7.5CVSS7.4AI score0.01482EPSS
Exploits1References3
Rows per page
Query Builder