1309 matches found
CVE-2023-36266
An issue was discovered in Keeper Password Manager for Desktop version 16.10.2 fixed in 17.2, and the KeeperFill Browser Extensions version 16.5.4 fixed in 17.2, allows local attackers to gain sensitive information via plaintext password storage in memory after the user is already logged in, and...
Design/Logic Flaw
DISPUTED An issue was discovered in Keeper Password Manager for Desktop version 16.10.2, and the KeeperFill Browser Extensions version 16.5.4, allows local attackers to gain sensitive information via plaintext password storage in memory after the user is already logged in, and may persist after...
CVE-2023-36266
An issue was discovered in Keeper Password Manager for Desktop version 16.10.2 fixed in 17.2, and the KeeperFill Browser Extensions version 16.5.4 fixed in 17.2, allows local attackers to gain sensitive information via plaintext password storage in memory after the user is already logged in, and...
Keeper Security Keeper Password Manager 安全漏洞
Keeper Security Keeper Password Manager is a password management system from Keeper Security. A security vulnerability exists in Keeper Security Keeper Password Manager version 16.10.2, which originates from a vulnerability that allows a local attacker to gain access to sensitive information via...
CVE-2023-36266
Keeper Password Manager for Desktop (v16.10.2) and KeeperFill Browser Extensions (v16.5.4) store credentials in plaintext in memory after login, enabling local attackers to access sensitive data and potentially persist after logout. The issue is addressed in Keeper v17.2. Root cause: plaintext in...
TeamPass cross-site scripting vulnerability (CNVD-2023-67077)
TeamPass is an open source password manager. TeamPass 3.0.10 prior to the version of the cross-site scripting vulnerability , the vulnerability stems from the Default session expiration time function of the user-supplied data lack of effective filtering and escaping , the vulnerability can be...
TeamPass 安全漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.0.10 that stems from incorrect output encoding or escaping...
TeamPass 信息泄露漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. An information disclosure vulnerability exists in versions prior to TeamPass 3.0.10, which originates from exposing sensitive information to unauthorized participants...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. TeamPass suffers from a cross-site scripting vulnerability that stems from the presence of a stored-type cross-site scripting vulnerability...
The vulnerabilities of the Zoho ManageEngine Password Manager Pro and the Zoho ManageEngine Access Manager Plus software solutions for control, management, and auditing allow a perpetrator to execute arbitrary requests or gain unauthorized access to protected information.
The vulnerability of the Zoho ManageEngine Password Manager Pro and the Zoho ManageEngine Access Manager Plus software solutions for control, management, and auditing lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute...
HTML Injection
teampass password manager is vulnerable to HTML injection .The vulnerability is due to lack of user input sanitisation while renaming a folder with user supplied folder name resulting in running malicious html when the same folder is accessed by other users including admin...
Cross Site Scripting (XSS)
teampass password manager is vulnerable to Stored XSS. The vulnerability is due to lack of sanitising user input while creating an item inside a folder which results in running malicious code when the same item is accessed by another user at later point in time...
TeamPass 安全漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.0.9 that stems from improperly escaping output encoding...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in versions prior to TeamPass 3.0.9, which stems from vulnerability to stored cross-site scripting XSS attacks...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in versions prior to TeamPass 3.0.9, which stems from vulnerability to stored cross-site scripting XSS attacks...
KeePass vulnerability allows attackers to access the master password
KeePass is a free open source password manager, which helps you to manage your passwords and stores them in encrypted form. In fact, KeePass encrypts the whole database, i.e. not only your passwords, but also your user names, URLs, notes, etc. That encrypted database can only be opened with the...
[SECURITY] [DLA 3423-1] epiphany-browser security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3423-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 15, 2023 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...
CVE-2023-25428
A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...
