CVE-2019-16371

CVE-2019-16371 affects LogMeIn LastPass prior to version 4.33.0. The issue arises from a vulnerability where a crafted website can bypass do_popupregister via clickjacking, enabling credential harvesting for accounts on previously visited sites. This is documented across multiple sources (NVD and...

CVE-2020-35207

LogMeIn LastPass Password Manager for iOS (version 4.8.11.2403) has an authentication bypass vulnerability: PIN unlock can be forced to succeed via runtime manipulation, allowing an attacker to authenticate with an arbitrary PIN. Root cause: manipulation of the PIN check process. Impact: partial ...

CVE-2020-35208

The CVE-2020-35208 entry concerns the LogMeIn LastPass Password Manager for iOS (version 4.8.11.2403). According to multiple connected sources, the vulnerability allows bypassing the login authentication by forcing the authentication result to true via runtime manipulation, enabling an attacker t...

CVE-2013-5113

CVE-2013-5113 concerns LastPass versions prior to 2.5.1 and an insecure PIN implementation. The vulnerability affects PIN handling in the affected LastPass release(s) and has associated CVSS scores indicating low (2.0) and medium (3.1) impact metrics in different schemes, with local/physical expo...

CVE-2013-5114

The core CVE-2013-5114 issue is described across multiple connected sources as affecting LastPass before version 2.5.1 and enabling a secure wipe bypass. The available documents confirm the affected software/version and the impact (bypass of secure wipe), but do not provide technical details on r...

CVE-2018-10193

CVE-2018-10193 affects LogMeIn LastPass up to version 4.15.0. The issue is a DoS caused by the onloadwff.js script whose resource consumption grows with the number of INPUT elements in an HTML document, leading to a browser hang. The connected records corroborate the vulnerability description acr...