Lucene search
+L

1604 matches found

CVE
CVE
•added 2020/11/03 2:21 a.m.•225 views

CVE-2020-15991

CVE-2020-15991: Use-after-free in the password manager of Chromium/Google Chrome before 86.0.4240.75 allows a remote attacker who can render HTML in the renderer to potentially escape the sandbox. The Debian/Fedora/Arch security advisories and FreeBSD/vuxml entries confirm this vulnerability and ...

8.8CVSS8.8AI score0.01452EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
•added 2020/11/03 2:21 a.m.•30 views

CVE-2020-15991

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS9.6AI score0.01452EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/03 12:00 a.m.•5 views

CVE-2020-15991: Use After Free

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS6.7AI score0.01452EPSS
SaveExploits0References2
Rapid7 Blog
Rapid7 Blog
•added 2020/10/30 2:38 p.m.•32 views

National Cybersecurity Awareness Month: Security Pros Offer Top Tips for Staying Safe Online

Held every October, CISA’s National Cybersecurity Awareness Month NCSAM aims to educate organizations and individuals about the ever-changing field of cybersecurity and encourage proper security practices. In honor of this event, we rounded up six key tips from our network of experts to help you...

7.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/10/13 8:22 a.m.•7 views

chromium-browser: Use after free in password manager

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS7.4AI score0.01452EPSS
SaveExploits0References5
Pen Test Partners Blog
Pen Test Partners Blog
•added 2020/10/08 5:12 a.m.•38 views

Cyber Security Month. What can you do?

October is Cyber Security Month, when organisations like the CISA, the ECSM, and many more promote initiatives to help raise security awareness. Around the world companies are dedicating time to improve staff security awareness, and its a really busy time for us. You may be thinking you’d like to...

7.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/10/07 9:35 a.m.•45 views

CVE-2020-15991

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS2.2AI score0.01452EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/10/06 12:00 a.m.•1 views

PT-2020-5707

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 86.0.4240.75 Description: The issue is related to a use after free in the password manager of Google Chrome, which could allow a remote attacker who has compromised the renderer process to potentially perform a...

8.8CVSS0.01452EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2020/10/06 12:00 a.m.•47 views

chromium -- multiple vulnerabilities

Chrome releases reports: This release contains 35 security fixes, including: 1127322 Critical CVE-2020-15967: Use after free in payments. Reported by Man Yue Mo of GitHub Security Lab on 2020-09-11 1126424 High CVE-2020-15968: Use after free in Blink. Reported by Anonymous on 2020-09-09 1124659...

8.8CVSS1AI score0.02482EPSS
SaveExploits4References1
Wired Threat Level
Wired Threat Level
•added 2020/09/21 11:00 a.m.•33 views

Think Twice Before Using Facebook, Google, or Apple to Sign In Everywhere

So-called single sign-on options offer a lot of convenience. But they have downsides that a good old fashioned password manager doesn't...

2.4AI score
SaveExploits0
OSV
OSV
•added 2020/09/10 6:15 p.m.•17 views

CVE-2020-15024

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...

5.5CVSS6AI score0.00322EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/10 6:15 p.m.•35 views

CVE-2020-15024

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...

5.5CVSS0.00322EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/09/10 6:15 p.m.•10 views

CVE-2020-15024

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...

5.5CVSS5.7AI score0.00322EPSS
SaveExploits0References3
Prion
Prion
•added 2020/09/10 6:15 p.m.•22 views

Default credentials

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...

2.1CVSS5.5AI score0.00322EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/09/10 5:10 p.m.•36 views

CVE-2020-15024

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...

5.5AI score0.00322EPSS
SaveExploits0References1
CVE
CVE
•added 2020/09/10 5:10 p.m.•67 views

CVE-2020-15024

Avast Antivirus 20.1.5069.562 Password Manager contains a vulnerability in the Login Password feature where the entered password remains in Windows main memory after logout or Lock Vault, creating a potential information-disclosure risk. The issue affects the Password Manager component; root caus...

5.5CVSS5.4AI score0.00322EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/10 12:00 a.m.•6 views

CVE-2020-15024: Improper Removal of Sensitive Information Before Storage or Transfer

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...

5.5CVSS5.8AI score0.00322EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/09/10 12:00 a.m.•17 views

PT-2020-14126 · Avast · Avast Antivirus

Name of the Vulnerable Software and Affected Versions: Avast Antivirus version 20.1.5069.562 Description: A security issue was found in the Login Password feature of the Password Manager component. When a user logs out or performs a Lock Vault operation, the entered password remains stored in...

5.5CVSS5.5AI score0.00322EPSS
SaveExploits0References2
Wired Threat Level
Wired Threat Level
•added 2020/08/21 11:00 a.m.•30 views

5 Password Manager Perks You Might Not Be Using

These tools don't just keep your accounts safe and secure. Here's how you can use them to streamline your whole online experience...

1.7AI score
SaveExploits0
Information Security Automation
Information Security Automation
•added 2020/07/18 6:31 p.m.•419 views

Barapass, Tsunami scanner, vulnerabilities in Windows DNS Server and SAP products, weird attack on Twitter

This episode is based on posts from my Telegram channel avleonovcom, published in the last 2 weeks. So, if you use Telegram, please subscribe. I update it frequently. Barapass update I recently released an update to my password manager barapass. BTW, it seems to be my only pet project at the MVP...

10CVSS7.4AI score0.96721EPSS
SaveExploits29
Rows per page
Query Builder