Symantec Norton Password Manager CVE-2019-18381 Cross-Origin Security Bypass Vulnerability

Description Symantec Norton Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Versions prior to Symantec Norton Password Manager...

Symantec Norton Password Manager CVE-2019-19545 Cross-Origin Security Bypass Vulnerability

Description Symantec Norton Password Manager is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Versions prior to Symantec Norton Password Manager...

CVE-2019-19545: Origin Validation Error

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

CVE-2019-18381: Origin Validation Error

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

CVE-2019-19546: Undefined Security Weakness

Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information...

PT-2019-15387

Name of the Vulnerable Software and Affected Versions Norton Password Manager versions prior to 6.6.2.5 Description The issue is related to a cross origin resource sharing CORS vulnerability. This type of issue allows restricted resources on a web page to be requested from another domain outside...

CVE-2019-15629

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

CVE-2019-15629

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

Design/Logic Flaw

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

CVE-2019-15629

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

CVE-2019-15629

The CVE describes a FLAG_MISUSE issue in Trend Micro Password Manager for Android, affecting versions 3.x, 5.0, and 5.1. The vulnerability could allow the app to share information with third‑party applications on the device. Technical specifics beyond this (root cause analysis, affected component...

PT-2019-5052

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to a buffer overflow in the password manager of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This could allow the...

CVE-2019-15629: Undefined Security Weakness

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

PT-2019-14307

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager versions 3.x through 5.1 Description The issue allows the application to share information with third-party applications on the device due to a FLAG MISUSE vulnerability. Recommendations For versions 3.x through 5....

The vulnerability of Norton Password Manager’s password manager component lies in the lack of protection for service data, which allows attackers to access and disclose the protected information.

The vulnerability of Norton Password Manager’s password manager component is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a hacker to access and disclose the protected information...

It's Time to Outsource Your Passwords to an App

Your brain has better things to do than store secure passwords. Get a dedicated password manager to keep your login data synced and secure across all devices...

The vulnerability of Norton Password Manager’s password manager module, related to errors in IP packet processing, allows a hacker to replace the IP address.

The vulnerability of the Norton Password Manager password manager is related to errors in IP packet processing. Exploiting this vulnerability could allow a malicious actor to replace the IP address...

Google Adds Password Checkup Feature to Chrome Browser

Google will soon alert Chrome browser users of weak or compromised passwords. The checks will be in real time as Chrome users visit a password protected website. Bad passwords will trigger a red dialogue box alerting users to take action to better protect their account. The move integrates a...

A Password-Exposing Bug Was Purged From LastPass

Google Project Zero found and reported a flaw in the widely used password manager...

CVE-2019-12755

Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information...