Lucene search
+L

1310 matches found

ATTACKERKB
ATTACKERKB
added 2021/06/16 1:15 p.m.5 views

CVE-2021-31857

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...

5.9CVSS6.4AI score0.02671EPSS
SaveExploits0References3
CVE
CVE
added 2021/06/16 12:45 p.m.49 views

CVE-2021-31857

The CVE-2021-31857 entry affects Zoho ManageEngine Password Manager Pro prior to 11.1 build 11104. The issue allows credential retrieval via a browser extension for non-website resource types, as described in multiple sources (NVD, Red Hat entry). The underlying cause is not explicitly detailed b...

5.9CVSS5.7AI score0.02671EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/06/16 12:45 p.m.35 views

CVE-2021-31857

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...

5.9AI score0.02671EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/06/16 12:0 a.m.7 views

ZOHO ManageEngine Password Manager Pro 安全漏洞

ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO USA. Additional vulnerabilities exist in Zoho ManageEngine Password Manager Pro. An attacker can use this vulnerability to obtain credentials for non-website resource types via a browser extension...

5.9CVSS6.1AI score0.02671EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/06/07 12:0 a.m.63 views

Mozilla Firefox has an unspecified vulnerability (CNVD-2021-54701)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A security vulnerability exists in Mozilla Firefox, which stems from a malicious Web site that generates HTTP authentication dialogs that could trick the built-in password manager into suggesting a password for...

5.3CVSS0.7AI score0.00737EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/06/05 10:1 p.m.29 views

Domain Spoofing

firefox is vulnerable to domain spoofing. A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog...

5.3CVSS0.4AI score0.00737EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/03 12:0 a.m.9 views

The vulnerability of Kaspersky Password Manager’s password manager, related to insufficient encryption strength, allows attackers to circumvent cryptographic security measures.

The vulnerability of Kaspersky Password Manager is related to insufficient encryption strength. Exploiting this vulnerability could allow an attacker to bypass cryptographic security measures...

7.5CVSS7.2AI score0.00739EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2021/06/01 12:0 a.m.269 views

Security Vulnerabilities fixed in Firefox 89 — Mozilla

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

7.1CVSS8.2AI score0.00842EPSS
SaveExploits0References9Affected Software1
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.8 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A security vulnerability exists in Mozilla Firefox, which stems from a malicious Web site that generates HTTP authentication dialogs that could trick the built-in password manager into suggesting a password for...

5.3CVSS8.2AI score0.00737EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2021/05/19 10:24 a.m.38 views

A Simple 1-Click Compromised Password Reset Feature Coming to Chrome Browser

Google on Tuesday announced a new feature to its password manager that could be used to change a stolen password automatically with a single tap. Automated password changes build on the tool's ability to check the safety of saved passwords. Thus when Chrome finds a password that may have been...

SaveExploits0
CNVD
CNVD
added 2021/05/19 12:0 a.m.11 views

Kaspersky Password Manager Encryption Problem Vulnerability

Kaspersky Password Manager is an application from the Russian company Kaspersky. It provides a function to manage passwords. Kaspersky Password Manager suffers from a cryptographic vulnerability that arises from a password generator feature that allows an attacker to predict the passwords that wi...

7.5CVSS6.8AI score0.00739EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/14 11:15 a.m.7 views

CVE-2020-27020

Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information for example, time of password generation...

7.5CVSS5.9AI score0.00739EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/14 11:15 a.m.26 views

CVE-2020-27020

Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information for example, time of password generation...

7.5CVSS0.00739EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/05/14 11:0 a.m.25 views

CVE-2020-27020

Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information for example, time of password generation...

7.5AI score0.00739EPSS
SaveExploits0References1
CVE
CVE
added 2021/05/14 11:0 a.m.61 views

CVE-2020-27020

CVE-2020-27020 concerns Kaspersky Password Manager. The password generator is not completely cryptographically strong, potentially allowing an attacker to predict generated passwords in some scenarios if they know extra information such as the generation time. The documents provide this high‑leve...

7.5CVSS7.4AI score0.00739EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/05/14 12:0 a.m.7 views

Kaspersky Password Manager 加密问题漏洞

Kaspersky Password Manager is an application from the Russian company Kaspersky. It provides a function to manage passwords. Kaspersky Password Manager suffers from a cryptographic vulnerability that arises from a password generator feature that allows an attacker to predict the passwords that wi...

7.5CVSS5.6AI score0.00739EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/04/20 3:25 a.m.10 views

Trend Micro Password Manager may insecurely load Dynamic Link Libraries

Overview Password Manager provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact...

7.8CVSS6.8AI score0.00469EPSS
SaveExploits0References6
OSV
OSV
added 2021/04/13 1:15 p.m.4 views

CVE-2021-28647

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

7.8CVSS5.8AI score0.00469EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/13 1:15 p.m.22 views

CVE-2021-28647

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

7.8CVSS0.00469EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/13 1:15 p.m.5 views

CVE-2021-28647

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

7.8CVSS5.5AI score0.00469EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder