Lucene search
+L

1603 matches found

HackRead
HackRead
•added 2023/09/27 6:18 p.m.•33 views

Fake Bitwarden Password Manager Website Drops Windows ZenRAT

By Deeba Ahmed If youve installed Bitwarden Password Manager recently, ensure that you downloaded it from its official website and not… This is a post from HackRead.com Read the original post: Fake Bitwarden Password Manager Website Drops Windows ZenRAT...

7AI score
SaveExploits0
OSV
OSV
•added 2023/09/27 3:19 p.m.•19 views

CVE-2023-4003

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges...

6.8CVSS5.8AI score0.00543EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/27 3:19 p.m.•21 views

CVE-2023-4003

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges...

7.6CVSS7.5AI score0.00543EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/27 3:19 p.m.•30 views

Default credentials

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges...

4.6CVSS6.6AI score0.00543EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/09/27 12:11 p.m.•81 views

CVE-2023-4003

CVE-2023-4003 affects One Identity Password Manager version 5.9.7.1. An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method (described as a privilege escalation due to execution with unnecessary privileges). The vulnerabili...

7.6CVSS6.8AI score0.00543EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/27 12:11 p.m.•31 views

CVE-2023-4003 One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges...

7.6CVSS7.7AI score0.00543EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/27 12:11 p.m.•16 views

CVE-2023-4003 One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges...

7.6CVSS6.9AI score0.00543EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/09/27 12:00 a.m.•16 views

One Identity Password Manager Security Vulnerability

One Identity Password Manager is a web platform for providing authentication from US-based One Identity. A security vulnerability exists in One Identity Password Manager version 5.9.7.1 that originates from allowing an attacker with physical access to elevate privileges to SYSTEM...

7.6CVSS6.6AI score0.00543EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/09/27 12:00 a.m.•20 views

PT-2023-27224 · One Identity · One Identity Password Manager

Name of the Vulnerable Software and Affected Versions: One Identity Password Manager version 5.9.7.1 Description: An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. This issue is related to execution with unnecessary...

7.6CVSS6.3AI score0.00543EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/27 12:00 a.m.•4 views

CVE-2023-4003: Execution with Unnecessary Privileges

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges...

7.6CVSS6.8AI score0.00543EPSS
SaveExploits0References2
Redos
Redos
•added 2023/09/12 12:00 a.m.•35 views

ROS-20230911-02

Vulnerability of the KeePass password manager password text field is related to storing credentials in unencrypted form. Exploitation of the vulnerability could allow an attacker acting remotely, to recover the master password in plaintext...

7.5CVSS7.7AI score0.04397EPSS
SaveExploits5
OSV
OSV
•added 2023/09/08 12:31 a.m.•29 views

GHSA-7CWQ-P8CR-H9QG Buttercup allows attackers to obtain the hash of the master password

Buttercup allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/. This affects the Buttercup app up to version 2.20.3...

5.3CVSS5.2AI score0.00475EPSS
SaveExploits1References6
NVD
NVD
•added 2023/09/07 10:15 p.m.•51 views

CVE-2023-41646

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

5.3CVSS5.4AI score0.00475EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/07 10:15 p.m.•29 views

Default credentials

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

5CVSS5.4AI score0.00475EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/09/07 12:00 a.m.•16 views

Buttercup Security Breach

Buttercup is a password manager. A security vulnerability exists in Buttercup version v2.20.3. An attacker can exploit this vulnerability to obtain the hash value of the password manager's master password by accessing the file /vaults.json/...

5.3CVSS6.8AI score0.00475EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/07 12:00 a.m.•2 views

CVE-2023-41646: Use of Password Hash With Insufficient Computational Effort

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

5.3CVSS6AI score0.00475EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/09/07 12:00 a.m.•15 views

CVE-2023-41646

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

6.9AI score0.00475EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/07 12:00 a.m.•59 views

CVE-2023-41646

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

5.6AI score0.00475EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/07 12:00 a.m.•53 views

CVE-2023-41646

Buttercup v2.20.3 is vulnerable: an attacker can obtain the master password hash by reading the vaults.json file. Root cause cited: exposure of vaults.json without proper protection. Impact per sources: potential leakage of master password hash (CVSS 3.1 base score 5.3, Confidentiality impact Low...

5.3CVSS5.3AI score0.00475EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2023/09/07 12:00 a.m.•2 views

CVE-2023-41646

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

6.9CVSS0.00475EPSS
SaveExploits1References9
Rows per page
Query Builder