Lucene search
+L

1603 matches found

CNNVD
CNNVD
•added 2023/07/08 12:00 a.m.•18 views

TeamPass 安全漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.0.10 that stems from incorrect output encoding or escaping...

7.6CVSS6.5AI score0.00541EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/07/08 12:00 a.m.•21 views

TeamPass 信息泄露漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. An information disclosure vulnerability exists in versions prior to TeamPass 3.0.10, which originates from exposing sensitive information to unauthorized participants...

7.5CVSS6AI score0.00828EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/07/06 12:00 a.m.•16 views

TeamPass 跨站脚本漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. TeamPass suffers from a cross-site scripting vulnerability that stems from the presence of a stored-type cross-site scripting vulnerability...

8.1CVSS6.4AI score0.00537EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2023/06/26 12:00 a.m.•18 views

The vulnerabilities of the Zoho ManageEngine Password Manager Pro and the Zoho ManageEngine Access Manager Plus software solutions for control, management, and auditing allow a perpetrator to execute arbitrary requests or gain unauthorized access to protected information.

The vulnerability of the Zoho ManageEngine Password Manager Pro and the Zoho ManageEngine Access Manager Plus software solutions for control, management, and auditing lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute...

10CVSS8.4AI score0.70578EPSS
SaveExploits0References3Affected Software3
Veracode
Veracode
•added 2023/06/12 1:18 p.m.•24 views

HTML Injection

teampass password manager is vulnerable to HTML injection .The vulnerability is due to lack of user input sanitisation while renaming a folder with user supplied folder name resulting in running malicious html when the same folder is accessed by other users including admin...

8.8CVSS7.2AI score0.01649EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2023/06/12 12:32 p.m.•18 views

Cross Site Scripting (XSS)

teampass password manager is vulnerable to Stored XSS. The vulnerability is due to lack of sanitising user input while creating an item inside a folder which results in running malicious code when the same item is accessed by another user at later point in time...

5.4CVSS6.9AI score0.00683EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/06/10 12:00 a.m.•22 views

TeamPass 安全漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.0.9 that stems from improperly escaping output encoding...

4.6CVSS5.6AI score0.00522EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/06/03 12:00 a.m.•16 views

TeamPass 跨站脚本漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in versions prior to TeamPass 3.0.9, which stems from vulnerability to stored cross-site scripting XSS attacks...

8.7CVSS6.5AI score0.00738EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/06/03 12:00 a.m.•17 views

TeamPass 跨站脚本漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in versions prior to TeamPass 3.0.9, which stems from vulnerability to stored cross-site scripting XSS attacks...

8.1CVSS7.3AI score0.00841EPSS
SaveExploits1References3
Malwarebytes
Malwarebytes
•added 2023/05/18 2:00 a.m.•83 views

KeePass vulnerability allows attackers to access the master password

KeePass is a free open source password manager, which helps you to manage your passwords and stores them in encrypted form. In fact, KeePass encrypts the whole database, i.e. not only your passwords, but also your user names, URLs, notes, etc. That encrypted database can only be opened with the...

5CVSS7.5AI score0.04397EPSS
SaveExploits5
Debian
Debian
•added 2023/05/15 9:36 p.m.•66 views

[SECURITY] [DLA 3423-1] epiphany-browser security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3423-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 15, 2023 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

7.5CVSS7.5AI score0.01238EPSS
SaveExploits1
NVD
NVD
•added 2023/05/12 4:15 p.m.•20 views

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

7.8CVSS7.8AI score0.00466EPSS
SaveExploits1References2
OSV
OSV
•added 2023/05/12 4:15 p.m.•12 views

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

7.8CVSS7.3AI score0.00466EPSS
SaveExploits1References2
Prion
Prion
•added 2023/05/12 4:15 p.m.•20 views

Default credentials

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

4.4CVSS7.8AI score0.00466EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/12 12:00 a.m.•11 views

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

7.4AI score0.00466EPSS
SaveExploits1References2
CVE
CVE
•added 2023/05/12 12:00 a.m.•69 views

CVE-2023-25428

Soft-o Free Password Manager 1.1.20 is affected by a DLL hijacking flaw (PMHook.dll) that can lead to arbitrary code execution when a malicious DLL is loaded from the system directory. Details cited across CVE-2023-25428 entries (NVD/Red Hat/EUVD/PRION/CVE records) describe the vulnerability as a...

7.8CVSS7.8AI score0.00466EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/05/12 12:00 a.m.•33 views

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

8AI score0.00466EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/12 12:00 a.m.•5 views

CVE-2023-25428: Uncontrolled Search Path Element

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

7.8CVSS6.2AI score0.00466EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/12 12:00 a.m.•5 views

PT-2023-20056

Name of the Vulnerable Software and Affected Versions Soft-o Free Password Manager version 1.1.20 Description A DLL Hijacking issue allows attackers to create arbitrary DLLs, leading to code execution. Recommendations For Soft-o Free Password Manager version 1.1.20, consider disabling the loading...

7.8CVSS0.00466EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/05/10 12:00 a.m.•14 views

Soft-o Free Password Manager 代码问题漏洞

Soft-o Free Password Manager is a password manager from Soft-o. A security vulnerability exists in Soft-o Free Password Manager version 1.1.20. An attacker could exploit this vulnerability to conduct a DLL hijacking attack...

7.8CVSS7.4AI score0.00466EPSS
SaveExploits1References4
Rows per page
Query Builder