1603 matches found
CVE-2021-33617
Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName= username enumeration, because the response to a failed login request is null only when the username is invalid...
CVE-2021-31857
In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...
CVE-2022-26337
Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...
CVE-2022-35404
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine...
CVE-2019-18381
Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...
CVE-2020-7962
An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid answers for a user. It is possible for an attacker to detect a valid answer based on the HTTP response content, and reuse this answer later for a password reset on a chosen password. The enumeration is...
The vulnerability of Trend Micro Password Manager lies in its improper handling of links before accessing a file. This allows attackers to escalate their privileges.
The vulnerability of the Trend Micro Password Manager lies in the improper handling of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2025-14372
Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0475-1 Rating: important References: 1254776 1255115 Cross-References: CVE-2025-14174 CVE-2025-14372 CVE-2025-14373 CVE-2025-14765 CVE-2025-14766 Affected Products: openSUSE Backports SLE-15-SP6 An update tha...
The vulnerability of the Password Manager component in the Google Chrome browser allows a hacker to disclose protected information and execute arbitrary codes.
The vulnerability of the Password Manager component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to disclose sensitive information and execute arbitrary codes...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0470-1 Rating: important References: 1254776 Cross-References: CVE-2025-14372 CVE-2025-14373 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes two vulnerabilities is now available...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0471-1 Rating: important References: 1254776 Cross-References: CVE-2025-14372 CVE-2025-14373 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes two vulnerabilities is now available...
Google Chrome Reuse After Release Vulnerability
Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from a post-release reuse vulnerability that stems from post-release reuse in the password manager. An attacker can exploit this vulnerability to perform a sandbox escape...
openSUSE 16 Security Update : chromium (openSUSE-SU-2025:20161-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20161-1 advisory. - Chromium 143.0.7499.109 boo1254776: CVE-2025-14372: Use after free in Password Manager CVE-2025-14373: Inappropriate implementation in Toolbar...
Fedora 42 : chromium (2025-a315866a59)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a315866a59 advisory. Update to 143.0.7499.109 High: Under coordination Medium CVE-2025-14372: Use after free in Password Manager Medium CVE-2025-14373: Inappropriate...
Security update for chromium (important)
openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20161-1 Rating: important References: bsc1254776 Cross-References: CVE-2025-14372 CVE-2025-14373 Affected Products: openSUSE Leap 16.0...
CVE-2025-14372
Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-14372
Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-14372
A Use after free vulnerability exists in the Password Manager component of Google Chrome prior to version 143.0.7499.110 . This flaw allows a remote attacker to potentially perform a sandbox escape by interacting with a crafted HTML page. The vulnerability has been addressed in Chromium version 1...
