Lucene search
+L

1331 matches found

Cvelist
Cvelist
added 2021/07/08 10:54 a.m.32 views

CVE-2021-32461

Trend Micro Password Manager Consumer version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allow a local attacker to trigger a buffer overflow and escalate privileges on affected installations. An attacker must first obtain the ability...

8.2AI score0.00369EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/08 10:54 a.m.55 views

CVE-2021-32461

Trend Micro Password Manager (Consumer) up to version 5.0.0.1217 is affected by an Integer Truncation Privilege Escalation vulnerability. The flaw allows a local attacker who can run low-privilege code to trigger a buffer overflow and escalate privileges (up to SYSTEM in affected scenarios), via ...

7.8CVSS8AI score0.00369EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/07/08 12:00 a.m.17 views

Mozilla Firefox Security Advisories (MFSA2021-23, MFSA2021-25) - Mac OS X

The host is missing a security update according to Mozilla advisory SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS7.8AI score0.01368EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
added 2021/07/06 2:27 p.m.51 views

Vulnerability in the Kaspersky Password Manager

A vulnerability just patched in the random number generator used in the Kaspersky Password Manager resulted in easily guessable passwords: The password generator included in Kaspersky Password Manager had several problems. The most critical one is that it used a PRNG not suited for cryptographic...

0.7AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/07/06 7:08 a.m.10 views

Multiple vulnerabilities in Trend Micro Password Manager

Overview Trend Micro Incorporated has released a security update for Trend Micro Password Manager. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Privilege escalation and buffer overflow due to improper processing of integ...

9CVSS8.5AI score0.05232EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2021/07/05 12:00 a.m.72 views

Trend Micro Password Manager Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Password Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the Trend Micro Password Manager Central Control Service. The issue results fro...

8.8CVSS5.5AI score0.05232EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/07/05 12:00 a.m.72 views

Trend Micro Password Manager Integer Truncation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Password Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Tre...

7CVSS4.9AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/28 12:00 a.m.7 views

Trend Micro Password Manager 输入验证错误漏洞

Trend Micro Password Manager is a secure password management solution from Trend Micro. runc is a CLI Command Line Interface tool for generating and running containers according to the OCI specification. An input validation error vulnerability exists in Trend Micro Password Manager that stems fro...

7.8CVSS8.3AI score0.00369EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/06/28 12:00 a.m.10 views

Trend Micro Password Manager 安全漏洞

Trend Micro Password Manager is a secure password management solution from Trend Micro. A security vulnerability exists in Trend Micro Password Manager that stems from the exposure of dangerous functionality. A remote client can manipulate the registry and elevate privileges to the SYSTEM of an...

9CVSS7.9AI score0.05232EPSS
SaveExploits0References4
OSV
OSV
added 2021/06/24 2:15 p.m.6 views

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS7.4AI score0.00737EPSS
SaveExploits0References2
NVD
NVD
added 2021/06/24 2:15 p.m.16 views

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS0.00737EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/06/24 2:15 p.m.7 views

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS6.5AI score0.00737EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/06/24 2:15 p.m.39 views

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS6.8AI score0.00737EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/24 2:15 p.m.9 views

UBUNTU-CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS6.4AI score0.00737EPSS
SaveExploits0References3
Prion
Prion
added 2021/06/24 2:15 p.m.21 views

Design/Logic Flaw

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

4.3CVSS4.9AI score0.00737EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2021/06/24 1:14 p.m.92 views

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS6.3AI score0.00737EPSS
SaveExploits0
OSV
OSV
added 2021/06/16 1:15 p.m.7 views

CVE-2021-31857

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...

5.9CVSS6.2AI score0.02671EPSS
SaveExploits0References2
NVD
NVD
added 2021/06/16 1:15 p.m.28 views

CVE-2021-31857

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...

5.9CVSS0.02671EPSS
SaveExploits0References2
Prion
Prion
added 2021/06/16 1:15 p.m.28 views

Design/Logic Flaw

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...

4.3CVSS5.7AI score0.02671EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/06/16 1:15 p.m.5 views

CVE-2021-31857

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...

5.9CVSS6.4AI score0.02671EPSS
SaveExploits0References3
Rows per page
Query Builder