CVE-2019-19546

CVE-2019-19546 affects Norton Password Manager prior to version 6.6.2.5. The issue is information disclosure that could expose sensitive data to an unauthorized actor. No exploitation details are provided in the sources. Remediation per the documents is to upgrade to 6.6.2.5 or later; Symantec’s ...

CVE-2019-19546

Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information...

CVE-2019-19545

CVE-2019-19545 affects Norton Password Manager. Multiple sources identify a cross-origin resource sharing (CORS) vulnerability in versions prior to 6.6.2.5, enabling restricted resources to be requested from external domains. Affected software is Symantec Norton Password Manager (multiple 6.x ver...

CVE-2019-19545

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

CVE-2019-18381

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

CVE-2019-18381

Norton Password Manager is affected by a Cross-Origin Resource Sharing (CORS) vulnerability in versions prior to 6.6.2.5, allowing restricted resources to be requested from other domains. The issue is documented across multiple sources (Symantec/Red Hat/CNVD) and is fixed in version 6.6.2.5. No e...

Symantec Norton Password Manager CVE-2019-19546 Information Disclosure Vulnerability

Description Symantec Norton Password Manager is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Symantec Norton Password Manager versions prior to 6.6.2.5 are vulnerable. Technologies...

Symantec Norton Password Manager CVE-2019-18381 Cross-Origin Security Bypass Vulnerability

Description Symantec Norton Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Versions prior to Symantec Norton Password Manager...

Symantec Norton Password Manager CVE-2019-19545 Cross-Origin Security Bypass Vulnerability

Description Symantec Norton Password Manager is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Versions prior to Symantec Norton Password Manager...

CVE-2019-15629

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

CVE-2019-15629

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

Design/Logic Flaw

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

CVE-2019-15629

The CVE describes a FLAG_MISUSE issue in Trend Micro Password Manager for Android, affecting versions 3.x, 5.0, and 5.1. The vulnerability could allow the app to share information with third‑party applications on the device. Technical specifics beyond this (root cause analysis, affected component...

CVE-2019-15629

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAGMISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device...

The vulnerability of Norton Password Manager’s password manager component lies in the lack of protection for service data, which allows attackers to access and disclose the protected information.

The vulnerability of Norton Password Manager’s password manager component is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a hacker to access and disclose the protected information...

It's Time to Outsource Your Passwords to an App

Your brain has better things to do than store secure passwords. Get a dedicated password manager to keep your login data synced and secure across all devices...

The vulnerability of Norton Password Manager’s password manager module, related to errors in IP packet processing, allows a hacker to replace the IP address.

The vulnerability of the Norton Password Manager password manager is related to errors in IP packet processing. Exploiting this vulnerability could allow a malicious actor to replace the IP address...

Google Adds Password Checkup Feature to Chrome Browser

Google will soon alert Chrome browser users of weak or compromised passwords. The checks will be in real time as Chrome users visit a password protected website. Bad passwords will trigger a red dialogue box alerting users to take action to better protect their account. The move integrates a...

A Password-Exposing Bug Was Purged From LastPass

Google Project Zero found and reported a flaw in the widely used password manager...

CVE-2019-12755

Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information...