CVE-2021-35052

Summary: CVE-2021-35052 concerns Kaspersky Password Manager. The connected ZDI advisory states the flaw exists in the Kaspersky Password Manager Service and arises from execution with unnecessary privileges, enabling local attackers to escalate from medium to high integrity by running code in the...

CVE-2021-35052: Improper Privilege Management

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

CVE-2021-44036

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

CVE-2021-44036

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

CVE-2021-44037

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

CVE-2021-44036

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

CVE-2021-44037

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

CVE-2021-44037

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

Default credentials

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

CVE-2021-44037

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

CVE-2021-44037

CVE-2021-44037 concerns Team Password Manager (TeamPasswordManager) before version 10.135.236, with a reported issue of password-reset poisoning. The core vulnerability description in the sources specifies that the product allows password-reset poisoning, but the exact root cause details are not ...

CVE-2021-44036

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

CVE-2021-44036

CVE-2021-44036 affects Team Password Manager (TeamPasswordManager) before version 10.135.236, with a cross-site request forgery (CSRF) vulnerability during import. The issue is rooted in insufficient request validation across import functionality, enabling an attacker to induce unintended actions...

CVE-2021-44037: Weak Password Recovery Mechanism for Forgotten Password

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

Team Password Manager 跨站请求伪造漏洞

Team Password Manager is a web-based team password manager. Team Password Manager suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could use this vulnerability to...

PT-2021-24025

Name of the Vulnerable Software and Affected Versions: Team Password Manager versions prior to 10.135.236 Description: The issue is related to a CSRF vulnerability that occurs during the import process. Recommendations: For versions prior to 10.135.236, update to version 10.135.236 or later to...

Team Password Manager 授权问题漏洞

Team Password Manager is a web-based team password manager. Team Password Manager suffers from an authorization issue vulnerability that arises from improper design or implementation during code development of a web-based system or product...

CVE-2021-44036: Cross-Site Request Forgery (CSRF)

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

Caveat Cyber Emptor: 3 Ways to Protect Sensitive Personal Data this Online Shopping Season

The phrase caveat emptor, Latin for “let the buyer beware”, has long been a warning to carefully scrutinize the quality and suitability of goods before making a purchase. In the world of eCommerce, caveat emptor has a whole new meaning. After meticulously researching any number of crowdsourcing...

Kaspersky Password Manager 安全漏洞

Kaspersky Password Manager is an application from the Russian company Kaspersky. It provides a function to manage passwords. A security vulnerability exists in Kaspersky Password Manager that allows an attacker to increase the process integrity level from medium to high...