Lucene search
+L

1603 matches found

Cvelist
Cvelist
•added 2022/04/12 4:11 p.m.•40 views

CVE-2022-28795

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...

6.6AI score0.01022EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/12 4:11 p.m.•95 views

CVE-2022-28795

CVE-2022-28795 affects Avira Password Manager Browser Extensions (Chrome, Edge, Opera, Firefox, Safari). A loophole could allow an attacker-supplied page to trigger the extension to autofill the password field, enabling access via JavaScript. The issue was fixed in extensions version 2.18.5 (Chro...

6.5CVSS6.3AI score0.01022EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•21 views

Avira Password Manager Browser Extensions 安全漏洞

Avira Password Manager Browser Extensions is a password management software by Little Red Umbrella, which is designed for chrome and can also be used on edge browsers to ensure that users can manage their passwords on the web. A security vulnerability exists in Avira Password Manager Browser...

6.5CVSS6.5AI score0.01022EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•3 views

PT-2022-19244

Name of the Vulnerable Software and Affected Versions Avira Password Manager Browser Extensions versions prior to 2.18.5 Description A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the...

6.5CVSS5.6AI score0.01022EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•7 views

CVE-2022-28795: Undefined Security Weakness

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...

6.5CVSS6.6AI score0.01022EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/29 12:01 a.m.•58 views

GHSA-M2WV-M5PF-284R Cross-site Scripting in teampass

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...

6.1CVSS5.9AI score0.01088EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/03/29 12:01 a.m.•28 views

Cross-site Scripting in teampass

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...

6.1CVSS2.5AI score0.01088EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2022/03/28 12:00 a.m.•17 views

Teampass 跨站脚本漏洞

TeamPass is an open source password manager from the individual developer NILS LAUMAILLÉ Nils Laumaillé. A security vulnerability exists in Teampass 2.1.26, which can be exploited by an attacker via index.php PATHINFO...

6.1CVSS6.2AI score0.01088EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•19 views

The vulnerability of Google Chrome’s browser password managers allows attackers to expose protected information.

The vulnerability of Google Chrome’s browser password managers is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created web page...

6.1CVSS7.1AI score0.0075EPSS
SaveExploits1References13Affected Software8
CNVD
CNVD
•added 2022/03/24 12:00 a.m.•65 views

Passwork On-Premise Edition Cross-Site Scripting Vulnerability

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland. cross-site scripting vulnerability exists in versions prior to Passwork On-Premise Edition 4.6.13, no detailed vulnerability details are currently available...

6.1CVSS1.7AI score0.00568EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/24 12:00 a.m.•64 views

Passwork On-Premise Edition Path Traversal Vulnerability

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland.A path traversal vulnerability exists in versions prior to Passwork On-Premise Edition 4.6.13, no detailed vulnerability details are currently available...

8.8CVSS2.7AI score0.01502EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/24 12:00 a.m.•58 views

Passwork On-Premise Edition Cross-Site Request Forgery Vulnerability

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland.A cross-site request forgery vulnerability exists in versions prior to Passwork On-Premise Edition 4.6.13, no detailed vulnerability details are currently available...

8.8CVSS2.6AI score0.00417EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/03/23 12:00 a.m.•18 views

Passwork On-Premise Edition 跨站请求伪造漏洞

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland.A cross-site request forgery vulnerability exists in versions prior to Passwork On-Premise Edition 4.6.13, no detailed vulnerability details are currently available...

8.8CVSS5.3AI score0.00417EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/03/23 12:00 a.m.•21 views

Passwork On-Premise Edition 路径遍历漏洞

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland.Passwork On-Premise Edition is vulnerable to path traversal, no detailed vulnerability details are available at this time...

4.3CVSS5.5AI score0.00953EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/03/11 6:55 a.m.•20 views

Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries

Overview Trend Micro Incorporated has released a security update for Trend Micro Password Manager. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A local attacker may obtain the administrative privilege when the product's...

9.3CVSS6.5AI score0.00682EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•21 views

KeePass 日志信息泄露漏洞

KeePass is an open source password manager. KeePass suffers from a log information disclosure vulnerability that occurs due to recording plain text passwords in system logs and results in an information exposure vulnerability. This vulnerability allows an attacker to interact and read sensitive...

7.5CVSS7.3AI score0.02451EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/03/09 12:00 a.m.•46 views

Trend Micro Password Manager Installer权限提升漏洞

Trend Micro Password Manager Installer is a password manager installer from Trend Micro, Inc. An elevation of privilege vulnerability exists in Trend Micro Password Manager Installer, which can be exploited by attackers to elevate privileges on the affected machine using specially crafted files...

9.3CVSS5.9AI score0.00682EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/08 10:15 p.m.•13 views

CVE-2022-26337

Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...

7.8CVSS7.1AI score0.00682EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/08 10:15 p.m.•15 views

CVE-2022-26337

Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...

9.3CVSS7.1AI score0.00682EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/08 10:15 p.m.•34 views

CVE-2022-26337

Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...

9.3CVSS0.00682EPSS
SaveExploits0References1
Rows per page
Query Builder