Lucene search
+L

9 matches found

Prion
Prion
•added 2022/12/19 3:15 p.m.•26 views

Design/Logic Flaw

A vulnerability has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as problematic. This vulnerability affects unknown code. The manipulation leads to insufficiently protected credentials. The attack can be initiated remotely. The exploit has be...

4CVSS6.5AI score0.00878EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2022/12/19 11:15 a.m.•27 views

CVE-2022-3875

A vulnerability classified as critical was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This vulnerability affects unknown code of the component API. The manipulation leads to authentication bypass by assumed-immutable data. The attack can be initiated remotely...

7.5CVSS0.01004EPSS
SaveExploits1References3
NVD
NVD
•added 2022/12/19 11:15 a.m.•24 views

CVE-2022-3876

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This issue affects some unknown processing of the file /api/browserextension/UpdatePassword/ of the component API. The manipulation of the argument...

6.5CVSS0.00876EPSS
SaveExploits1References3
CVE
CVE
•added 2022/12/19 12:00 a.m.•86 views

CVE-2022-4611

CVE-2022-4611 affects Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Vulnerability details in the provided documents indicate a manipulation that results in hard-coded credentials in an unspecified part of the product, with remote initiation possible and public disclosure...

5.3CVSS4.9AI score0.0126EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/19 12:00 a.m.•4 views

CVE-2022-4611: Use of Hard-coded Credentials

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS5.3AI score0.0126EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/19 12:00 a.m.•4 views

CVE-2022-3877: Improper Neutralization

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected is an unknown function of the component URL Field Handler. The manipulation leads to cross site scripting. It is possible to launch the attack...

5.4CVSS3.9AI score0.0066EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/19 12:00 a.m.•4 views

CVE-2022-3876: Incorrect Privilege Assignment

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This issue affects some unknown processing of the file /api/browserextension/UpdatePassword/ of the component API. The manipulation of the argument...

6.5CVSS5.3AI score0.00876EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/19 12:00 a.m.•3 views

CVE-2022-4610: Use of a Broken or Risky Cryptographic Algorithm

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this...

5.5CVSS5.3AI score0.00244EPSS
SaveExploits1References3
CVE
CVE
•added 2022/12/19 12:00 a.m.•66 views

CVE-2022-3877

CVE-2022-3877 affects Click Studios Passwordstate and Passwordstate Browser Extension Chrome. The issue is a vulnerability in an unknown function of the URL Field Handler that enables cross-site scripting. It can be triggered remotely, and public disclosures exist describing the exploit. A fix is...

5.4CVSS4.5AI score0.0066EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder