Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•4 views

CVE-2026-19992: Exposure of Sensitive Information to an Unauthorized Actor

A flaw has been found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome. Affected is an unknown function of the component postMessage-based Bridge. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. A...

3.1CVSS4.4AI score0.00387EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/21 12:00 a.m.•19 views

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

6.1AI score0.00236EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/21 12:00 a.m.•93 views

CVE-2024-24272

The iTop DualSafe Password Manager & Digital Vault software (versions prior to 1.4.24 ) contains a vulnerability where sensitive credentials are leaked as plaintext in a log file. A local attacker can access this log file to obtain the sensitive information without requiring knowledge of the mast...

7.1CVSS6AI score0.00236EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•5 views

CVE-2024-24272: Insertion of Sensitive Information into Log File

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

7.1CVSS5.8AI score0.00236EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/03/21 12:00 a.m.•30 views

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

6AI score0.00236EPSS
SaveExploits1References1
hackapp
hackapp
•added 2016/10/20 4:33 p.m.•22 views

SecureSafe Digital Vault - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SecureSafe Digital Vault published at the 'play' market has multiple vulnerabilities...

1.2AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder