CVE-2019-19545

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

CVE-2019-18381

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

Cross site scripting

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

Information disclosure

Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information...

Cross site scripting

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

CVE-2019-19546

CVE-2019-19546 affects Norton Password Manager prior to version 6.6.2.5. The issue is information disclosure that could expose sensitive data to an unauthorized actor. No exploitation details are provided in the sources. Remediation per the documents is to upgrade to 6.6.2.5 or later; Symantec’s ...

CVE-2019-19546

Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information...

CVE-2019-19545

CVE-2019-19545 affects Norton Password Manager. Multiple sources identify a cross-origin resource sharing (CORS) vulnerability in versions prior to 6.6.2.5, enabling restricted resources to be requested from external domains. Affected software is Symantec Norton Password Manager (multiple 6.x ver...

CVE-2019-19545

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

CVE-2019-18381

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

CVE-2019-18381

Norton Password Manager is affected by a Cross-Origin Resource Sharing (CORS) vulnerability in versions prior to 6.6.2.5, allowing restricted resources to be requested from other domains. The issue is documented across multiple sources (Symantec/Red Hat/CNVD) and is fixed in version 6.6.2.5. No e...

Symantec Norton Password Manager CVE-2019-19546 Information Disclosure Vulnerability

Description Symantec Norton Password Manager is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Symantec Norton Password Manager versions prior to 6.6.2.5 are vulnerable. Technologies...

Symantec Norton Password Manager CVE-2019-18381 Cross-Origin Security Bypass Vulnerability

Description Symantec Norton Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Versions prior to Symantec Norton Password Manager...

Symantec Norton Password Manager CVE-2019-19545 Cross-Origin Security Bypass Vulnerability

Description Symantec Norton Password Manager is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Versions prior to Symantec Norton Password Manager...

Symantec Norton App Lock Security Restriction Bypass Vulnerability

Symantec Norton App Lock is an application from Symantec USA that provides app locking capabilities for mobile devices. A security restriction bypass vulnerability exists in versions prior to Symantec Norton App Lock 1.4.0.503, which can be exploited by an attacker to bypass the software, prevent...

CVE-2019-18373

Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking other apps on the device, thereby allowing the individual to gain access...

CVE-2019-18373

Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking other apps on the device, thereby allowing the individual to gain access...

Sql injection

Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking other apps on the device, thereby allowing the individual to gain access...

CVE-2019-18373

Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking other apps on the device, thereby allowing the individual to gain access...

CVE-2019-18373

Symantec Norton App Lock (Android) is vulnerable to a local security bypass prior to version 1.4.0.503. The bypass could allow a local attacker to circumvent the app’s restrictions and gain access by defeating its locking of other apps. Public references from Symantec’s vulnerability writeup corr...