Cross site scripting

Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to steal other users' credentials by creating a shared password with HTML code as the title...

CVE-2019-19461

Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to steal other users' credentials by creating a shared password with HTML code as the title...

CVE-2019-19461

CVE-2019-19461 affects Team Password Manager (up to version 7.93.204 and earlier). The root cause is described as a cross-site scripting vulnerability resulting from insufficient validation of client-side data, enabling post-authentication stored XSS. An attacker can steal other users’ credential...

CVE-2020-9347: Improper Neutralization of Formula Elements in a CSV File

Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external...

PT-2020-20602 · Zoho · Manageengine Password Manager Pro

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Password Manager Pro versions prior to 11.x Description: The issue is related to a CSV Excel Macro Injection vulnerability. It occurs when a crafted name is mishandled by the Export Passwords feature. The vendor has expresse...

PT-2020-20601 · Zoho · Manageengine Password Manager Pro

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Password Manager Pro versions 10.4 and prior Description: The issue concerns a lack of protection against Cross-site Request Forgery CSRF attacks. This can be demonstrated by an attacker changing a user's role...

PT-2020-10166

Name of the Vulnerable Software and Affected Versions Team Password Manager versions through 7.93.204 Description The issue allows attackers to steal other users' credentials by creating a shared password with HTML code as the title, exploiting a post-authentication stored XSS. Recommendations Fo...

CVE-2020-9346: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery CSRF attacks, as demonstrated by changing a user's role...

CVE-2019-19461: Improper Neutralization of Input During Web Page Generation

Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to steal other users' credentials by creating a shared password with HTML code as the title...

Trend Micro Password Manager DLL Hijacking Vulnerability (CNVD-2020-21008)

Trend Micro Password Manager is a secure password management solution from Trend Micro. A DLL hijacking vulnerability exists in version 5.0 of Trend Micro Password Manager for Windows platforms, which can be exploited by attackers to elevate privileges...

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

Design/Logic Flaw

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

CVE-2020-8469

Trend Micro Password Manager for Windows 5.0 is affected by a DLL hijacking vulnerability that could lead to local privilege escalation. This is documented across multiple sources; no exploitation status or remediation details are provided in the connected documents. Monitor for updates and rely ...

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

CVE-2020-8469: Uncontrolled Search Path Element

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

PT-2020-20155

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager for Windows version 5.0 Description The issue is related to a DLL hijacking vulnerability that could potentially allow an attacker privileged escalation. Recommendations For Trend Micro Password Manager for Windows...

CVE-2016-1159

In ZOHO Password Manager Pro PMP 8.3.0 Build 8303 and 8.4.0 Build 8400,8401,8402, underprivileged users can obtain sensitive information entry password history via a vulnerable hidden service...

CVE-2016-1159

In ZOHO Password Manager Pro PMP 8.3.0 Build 8303 and 8.4.0 Build 8400,8401,8402, underprivileged users can obtain sensitive information entry password history via a vulnerable hidden service...