Remote code execution

Trend Micro Password Manager Consumer version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerability which could allow an unprivileged client to manipulate the registry and escalate privileges to SYSTEM on affected installations. Authentication is...

CVE-2021-32461

Trend Micro Password Manager Consumer version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allow a local attacker to trigger a buffer overflow and escalate privileges on affected installations. An attacker must first obtain the ability...

CVE-2021-32462

Trend Micro Password Manager Consumer version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerability which could allow an unprivileged client to manipulate the registry and escalate privileges to SYSTEM on affected installations. Authentication is...

CVE-2021-32462

Summary: CVE-2021-32462 affects Trend Micro Password Manager (Consumer), ≤v5.0.0.1217, with an Exposed Hazardous Function Remote Code Execution flaw in the Central Control Service. An unprivileged user can cause registry manipulation and privilege escalation to SYSTEM, with authentication require...

CVE-2021-32461

Trend Micro Password Manager (Consumer) up to version 5.0.0.1217 is affected by an Integer Truncation Privilege Escalation vulnerability. The flaw allows a local attacker who can run low-privilege code to trigger a buffer overflow and escalate privileges (up to SYSTEM in affected scenarios), via ...

CVE-2021-32461

Trend Micro Password Manager Consumer version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allow a local attacker to trigger a buffer overflow and escalate privileges on affected installations. An attacker must first obtain the ability...

CVE-2021-32462: Undefined Security Weakness

Trend Micro Password Manager Consumer version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerability which could allow an unprivileged client to manipulate the registry and escalate privileges to SYSTEM on affected installations. Authentication is...

Mozilla Firefox Security Advisories (MFSA2021-23, MFSA2021-25) - Mac OS X

The host is missing a security update according to Mozilla advisory SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2021-32461: Incorrect Conversion between Numeric Types

Trend Micro Password Manager Consumer version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allow a local attacker to trigger a buffer overflow and escalate privileges on affected installations. An attacker must first obtain the ability...

Vulnerability in the Kaspersky Password Manager

A vulnerability just patched in the random number generator used in the Kaspersky Password Manager resulted in easily guessable passwords: The password generator included in Kaspersky Password Manager had several problems. The most critical one is that it used a PRNG not suited for cryptographic...

Multiple vulnerabilities in Trend Micro Password Manager

Overview Trend Micro Incorporated has released a security update for Trend Micro Password Manager. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Privilege escalation and buffer overflow due to improper processing of integ...

PT-2021-19714

Name of the Vulnerable Software and Affected Versions: Trend Micro Password Manager Consumer version 5.0.0.1217 and below Description: The issue allows an unprivileged client to manipulate the registry and escalate privileges to SYSTEM on affected installations through an Exposed Hazardous Functi...

PT-2021-19713

Name of the Vulnerable Software and Affected Versions: Trend Micro Password Manager Consumer versions 5.0.0.1217 and below Description: The issue is related to an Integer Truncation Privilege Escalation, which could allow a local attacker to trigger a buffer overflow and escalate privileges on...

Trend Micro Password Manager Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Password Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the Trend Micro Password Manager Central Control Service. The issue results fro...

Trend Micro Password Manager Integer Truncation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Password Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Tre...

PT-2021-20815

Name of the Vulnerable Software and Affected Versions: Kaspersky Password Manager affected versions not specified WinRAR affected versions not specified Description: A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

Trend Micro Password Manager 安全漏洞

Trend Micro Password Manager is a secure password management solution from Trend Micro. A security vulnerability exists in Trend Micro Password Manager that stems from the exposure of dangerous functionality. A remote client can manipulate the registry and elevate privileges to the SYSTEM of an...

Trend Micro Password Manager 输入验证错误漏洞

Trend Micro Password Manager is a secure password management solution from Trend Micro. runc is a CLI Command Line Interface tool for generating and running containers according to the OCI specification. An input validation error vulnerability exists in Trend Micro Password Manager that stems fro...

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...