CVE-2021-28647

CVE-2021-28647 affects Trend Micro Password Manager for Windows (Consumer) 5.x. The root cause is a DLL search path hijack during installer execution, allowing a malicious DLL to be loaded and potentially cause arbitrary execution of code each time a user installs a program. Public sources descri...

CVE-2021-28647

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

Trend Micro Password Manager 代码问题漏洞

Trend Micro Password Manager is a secure password management solution from Trend Micro. A security vulnerability exists in Trend Micro Password Manager version 5, which stems from the program's susceptibility to a DLL hijacking vulnerability that could allow an attacker to inject a malicious DLL...

The vulnerability of Kaspersky Password Manager’s password manager, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of Kaspersky Password Manager is related to security configuration errors. Exploiting this vulnerability can allow attackers to increase their privileges...

Privilege Escalation

chromium is vulnerable to privilege escalation. A use-after-free in password manager allows a remote attacker who has compromised the renderer process to escape the sandbox via a malicious HTML page...

CVE-2020-35207

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate wi...

Authentication flaw

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authentica...

CVE-2020-35207

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate wi...

CVE-2020-35207

LogMeIn LastPass Password Manager for iOS (version 4.8.11.2403) has an authentication bypass vulnerability: PIN unlock can be forced to succeed via runtime manipulation, allowing an attacker to authenticate with an arbitrary PIN. Root cause: manipulation of the PIN check process. Impact: partial ...

CVE-2020-35208

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authentica...

CVE-2020-35208

The CVE-2020-35208 entry concerns the LogMeIn LastPass Password Manager for iOS (version 4.8.11.2403). According to multiple connected sources, the vulnerability allows bypassing the login authentication by forcing the authentication result to true via runtime manipulation, enabling an attacker t...

CVE-2020-35208

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authentica...

LogMein LastPass Password Manager Authorization Issues Vulnerability

Logmein LogMeIn LastPass is a cross-platform online password management tool from US-based Logmein. LogMein LastPass Password Manager suffers from an authorization issue vulnerability that stems from the fact that password authentication for a problematic unlock can be bypassed by forcing the...

CVE-2020-29392

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

CVE-2020-29392

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

Default credentials

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

CVE-2020-29392

CVE-2020-29392 affects the Estil Hill Lock Password Manager Safe app 2.3 for iOS. A #06# backdoor password allows an attacker with physical access to unlock the password manager without the user’s master password. The connected Red Hat/NVD records repeat the same description; no explicit remediat...

CVE-2020-29392

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

Estil Hill Lock Password Manager Safe app Security Breach

Estil Hill Lock Password Manager Safe App For IOS is a software for centralized security management of device application passwords from the individual developer Estill Hill. A security vulnerability exists in the Estil Hill Lock Password Manager Safe app version 2.3 for ios, which stems from the...

CVE-2020-7962

An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid answers for a user. It is possible for an attacker to detect a valid answer based on the HTTP response content, and reuse this answer later for a password reset on a chosen password. The enumeration is...