Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
password manager vulnerabilities and exploits
(subscribe to this query)
5.9
CVSSv3
CVE-2021-31857
In Zoho ManageEngine Password Manager Pro prior to 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types.
Zohocorp Manageengine Password Manager Pro 11.1
Zohocorp Manageengine Password Manager Pro
5.3
CVSSv3
CVE-2021-33617
Zoho ManageEngine Password Manager Pro prior to 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response (to a failed login request) is null only when the username is invalid.
Zohocorp Manageengine Password Manager Pro
Zohocorp Manageengine Password Manager Pro 11.2
6.5
CVSSv3
CVE-2016-1159
In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service.
Zohocorp Manageengine Password Manager Pro 8.3
Zohocorp Manageengine Password Manager Pro 8.4
4.6
CVSSv3
CVE-2020-29392
The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a *#06#* backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user.
Lock Password Manager Safe App Project Lock Password Manager Safe App 2.3
9.8
CVSSv3
CVE-2022-29081
Zoho ManageEngine Access Manager Plus prior to 4302, Password Manager Pro prior to 12007, and PAM360 prior to 5401 are vulnerable to access-control bypass on a few Rest API URLs (for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize...
Zohocorp Manageengine Password Manager Pro 10.4
Zohocorp Manageengine Password Manager Pro 10.3
Zohocorp Manageengine Password Manager Pro 10.2
Zohocorp Manageengine Password Manager Pro 10.1
Zohocorp Manageengine Password Manager Pro 11.1
Zohocorp Manageengine Access Manager Plus 4.2
Zohocorp Manageengine Pam360 5.3
Zohocorp Manageengine Pam360 5.2
Zohocorp Manageengine Pam360 5.1
Zohocorp Manageengine Pam360 5.0
Zohocorp Manageengine Pam360 4.5
Zohocorp Manageengine Pam360 4.1
Zohocorp Manageengine Pam360 4.0
Zohocorp Manageengine Access Manager Plus 4.1
Zohocorp Manageengine Pam360 5.4
Zohocorp Manageengine Password Manager Pro 12.0
Zohocorp Manageengine Password Manager Pro 11.3
Zohocorp Manageengine Password Manager Pro 11.2
Zohocorp Manageengine Access Manager Plus 4.3
Zohocorp Manageengine Access Manager Plus 4.0
3.9
CVSSv3
CVE-2019-9700
Norton Password Manager, before 6.3.0.2082, may be susceptible to an address spoofing issue. This type of issue may allow an malicious user to disguise their origin IP address in order to obfuscate the source of network traffic.
Norton Password Manager
7.8
CVSSv3
CVE-2022-26337
Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an malicious user to use a specially crafted file to exploit the vulnerability and escalate local privileges on the a...
Trendmicro Password Manager
6.8
CVSSv3
CVE-2023-4003
One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges.
Oneidentity Password Manager
9.8
CVSSv3
CVE-2016-3987
The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.
Trendmicro Password Manager -
1 EDB exploit
7.8
CVSSv3
CVE-2018-6306
Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions prior to 8.0.6.538.
Kaspersky Password Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »