Lucene search
+L

1307 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 8:34 a.m.10 views

CVE-2019-19461

Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to steal other users' credentials by creating a shared password with HTML code as the title...

5.4CVSS6.1AI score0.00541EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:26 a.m.13 views

CVE-2019-19696

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to...

5.5CVSS6.6AI score0.00472EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:26 a.m.10 views

CVE-2019-19546

Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information...

6.5CVSS6.4AI score0.00874EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:11 a.m.12 views

CVE-2019-15629

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

7.5CVSS6.6AI score0.02898EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:51 a.m.12 views

CVE-2019-10884

Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vulnerability means that passwords saved for example.com will be recommended for usersite.example.com. This could lead to successful phishing campaigns and crea...

8.8CVSS6.9AI score0.01231EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:27 a.m.12 views

CVE-2017-17698

Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...

6.1CVSS6.1AI score0.01547EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:18 a.m.23 views

CVE-2019-14684

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687...

9.3CVSS6.8AI score0.0155EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:29 a.m.10 views

CVE-2019-14687

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684...

9.3CVSS6.8AI score0.0155EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:26 a.m.12 views

CVE-2019-15625

A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information...

5.5CVSS6.7AI score0.00976EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:20 a.m.8 views

CVE-2019-12880

BCN Quark Quarking Password Manager 3.1.84 suffers from a clickjacking vulnerability caused by allowing within webaccessibleresources. An attacker can take advantage of this vulnerability and cause significant harm...

4.3CVSS6.9AI score0.0142EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:57 a.m.14 views

CVE-2016-1159

In ZOHO Password Manager Pro PMP 8.3.0 Build 8303 and 8.4.0 Build 8400,8401,8402, underprivileged users can obtain sensitive information entry password history via a vulnerable hidden service...

6.5CVSS6.7AI score0.0332EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2025/05/21 7:11 a.m.11 views

Google Chrome's Built-in Manager Lets Users Update Breached Passwords with One Click

Google has announced a new feature in its Chrome browser that lets its built-in Password Manager automatically change a user's password when it detects the credentials to be compromised. "When Chrome detects a compromised password during sign in, Google Password Manager prompts the user with an...

7.2AI score
SaveExploits0
Hacker One
Hacker One
added 2025/03/18 8:41 a.m.968 views

1Password - Enterprise Password Manager: #**CSV Injection in shared passwords leads to complete Private Vault Exfiltration**

Vulnerability description not provided...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/03/04 5:15 p.m.6 views

CVE-2025-26091

A Cross Site Scripting XSS vulnerability exists in TeamPasswordManager v12.162.284 and before that could allow a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'name' parameter when creating a new password in the "My...

4.6CVSS6AI score0.00295EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/19 3:22 a.m.7 views

CVE-2025-26700

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information...

5.2CVSS6.7AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/17 3:15 a.m.11 views

CVE-2025-26700

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information...

5.2CVSS0.00254EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/17 2:59 a.m.63 views

CVE-2025-26700

The CVE-2025-26700 entry relates to RoboForm Password Manager for Android, where versions older than 9.7.4 are vulnerable to an authentication bypass via an alternate path or channel. The core impact is that an attacker with physical access to a device could bypass the app’s lock screen and acces...

5.2CVSS6.8AI score0.00254EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/17 2:59 a.m.15 views

CVE-2025-26700

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information...

5.2CVSS0.00254EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/17 2:59 a.m.7 views

CVE-2025-26700

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information...

5.2CVSS6.8AI score0.00254EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/17 12:0 a.m.4 views

Siber Systems RoboForm Password Manager 安全漏洞

Siber Systems RoboForm Password Manager is a password manager from Siber Systems. A security vulnerability exists in Siber Systems RoboForm Password Manager versions prior to 9.7.4, which stems from an authentication bypass path issue that could allow an attacker to bypass the lock screen to obta...

5.2CVSS5.4AI score0.00254EPSS
SaveExploits0References4
Rows per page
Query Builder