Lucene search
+L

1603 matches found

Vulnrichment
Vulnrichment
•added 2026/05/20 10:54 p.m.•15 views

CVE-2026-47782

Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor...

4.6CVSS5.6AI score0.00172EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/20 12:00 a.m.•40 views

PT-2026-42271

Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor...

4.6CVSS5.8AI score0.00172EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•25 views

Siber Systems RoboForm Password Manager 安全漏洞

Siber Systems RoboForm Password Manager is a password manager offered by Siber Systems. There is a security vulnerability in Siber Systems RoboForm Password Manager. This vulnerability arises from insufficient URL validation, user confirmation, or notification when processing Android intentions. ...

4.6CVSS5.8AI score0.00172EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•5 views

CVE-2026-47782: Insufficient UI Warning of Dangerous Operations

Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor...

4.6CVSS5.4AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/17 12:00 a.m.•28 views

PT-2026-46719

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in the Password Manager allows a remote attacker to perform UI spoofing via malicious network traffic. UI spoofing is a technique where an...

5CVSS6.7AI score0.00176EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/17 12:00 a.m.•20 views

PT-2026-46720

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Insufficient policy enforcement in the Password Manager allows a remote attacker to bypass discretionary access control, which is a mechanism that restricts access to objects based on t...

7.8CVSS6.8AI score0.00216EPSS
SaveExploits0
EUVD
EUVD
•added 2026/04/16 3:31 p.m.•22 views

EUVD-2026-23239

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.9AI score0.02622EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/16 2:16 p.m.•22 views

CVE-2026-5785

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS0.02622EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/16 1:46 p.m.•45 views

CVE-2026-5785 SQL Injection

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS0.02622EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/16 1:46 p.m.•54 views

CVE-2026-5785

The CVE-2026-5785 issue affects Zohocorp ManageEngine PAM360 (versions before 8531) and ManageEngine Password Manager Pro (versions 8600 to 13230). The vulnerability is an Authenticated SQL injection in the query report module, allowing an attacker with LOW privileges and no user interaction to t...

8.1CVSS5.8AI score0.02622EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/16 1:46 p.m.•11 views

CVE-2026-5785 SQL Injection

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.8AI score0.02622EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/16 1:46 p.m.•14 views

CVE-2026-5785

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.9AI score0.02622EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•26 views

ZOHO ManageEngine Password Manager Pro和ZOHO ManageEngine PAM360 安全漏洞

ZOHO ManageEngine Password Manager Pro and ZOHO ManageEngine PAM360 are both products of ZOHO Corporation in the United States. ZOHO ManageEngine Password Manager Pro is a password manager. ZOHO ManageEngine PAM360 is a complete PAM software solution. It provides full privilege access security fo...

8.1CVSS5.9AI score0.02622EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•27 views

PT-2026-33319

Name of the Vulnerable Software and Affected Versions ManageEngine PAM360 versions prior to 8531 ManageEngine Password Manager Pro versions 8600 through 13230 Description An authenticated SQL injection exists in the query report module. SQL injection is a type of flaw that allows an attacker to...

8.1CVSS5.8AI score0.02622EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•3 views

CVE-2026-5785: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.8AI score0.02622EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/11 12:00 a.m.•20 views

PT-2026-46678

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in the Password Manager allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafte...

7.6CVSS7.1AI score0.00221EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•19 views

PT-2026-46611

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in the Password Manager allows a remote attacker to leak cross-origin data, which is data from a different domain than the one that initiated the request...

7.8CVSS6.2AI score0.00176EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•22 views

PT-2026-46612

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in the Password Manager allows a remote attacker to leak cross-origin data, which is data from a different domain than the one that initiated the request...

7.8CVSS6.3AI score0.00176EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•21 views

PT-2026-46578

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue exists in the Password Manager. This allows a remote attacker to execute arbitrary code within a sandbox by utilizing a specially crafted HTML page. Use after fre...

10CVSS8AI score0.0028EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/03/31 8:51 a.m.•21 views

CVE-2026-3106

Blind Cross-Site Scripting XSS in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/index.php'. During failed authentication attempts, the application does not properly clean or encode the information...

9.3CVSS6AI score0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder