CVSS: 3.9EPSS: 0%CPEs: 2EXPL: 0CVE-2019-9700
https://notcve.org/view.php?id=CVE-2019-9700
16 Jul 2019 — Norton Password Manager, prior to 6.3.0.2082, may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the source of network traffic. Norton Password Manager, anterior a versión 6.3.0.2082, puede ser susceptible a un problema de suplantación de direcciones. Este clase de problema puede permitir a un atacante disfrazar su dirección IP de origen para ofuscar la fuente del tráfico de la red. • https://support.symantec.com/us/en/article.SYMSA1483.html •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-10884
https://notcve.org/view.php?id=CVE-2019-10884
05 Apr 2019 — Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vulnerability means that passwords saved for example.com will be recommended for usersite.example.com. This could lead to successful phishing campaigns and create a sense of false security. Uniqkey Password Manager 1.14 contiene una vulnerabilidad porque no reconoce correctamente la diferencia entre los dominios y subdominios. Esta vulnerabilidad significa que las contrase... • https://vuldb.com/?id.133069 • CWE-287: Improper Authentication •
CVSS: 6.5EPSS: 1%CPEs: 1EXPL: 0CVE-2019-10676 – Uniqkey Password Manager 1.14 Credential Disclosure
https://notcve.org/view.php?id=CVE-2019-10676
05 Apr 2019 — An issue was discovered in Uniqkey Password Manager 1.14. Upon entering new credentials to a site that is not registered within this product, a pop-up window will appear prompting the user if they want to save this new password. This pop-up window will persist on any page the user enters within the browser until a decision is made. The code of the pop-up window can be read by remote servers and contains the login credentials and URL in cleartext. A malicious server could easily grab this information from th... • https://cxsecurity.com/issue/WLB-2019040055 • CWE-269: Improper Privilege Management •
CVSS: 6.5EPSS: 1%CPEs: 1EXPL: 0CVE-2019-10845 – Uniqkey Password Manager 1.14 Denial of Service
https://notcve.org/view.php?id=CVE-2019-10845
05 Apr 2019 — An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent, manipulated by remote servers. This pop-up window will stay on any page the user visits within the browser until a decision is made. A malicious web server can forcefully manipulate the pop-up and cause it not to appear,... • http://packetstormsecurity.com/files/152452/Uniqkey-Password-Manager-1.14-Denial-Of-Service.html •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-6306
https://notcve.org/view.php?id=CVE-2018-6306
19 Apr 2018 — Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538. Ejecución de código no autorizado de un DLL específico, conocido como ataque de secuestro de DLL, en las versiones anteriores a la 8.0.6.538 de Kaspersky Password Manager. • https://support.kaspersky.com/vulnerability.aspx?el=12430#120418 • CWE-426: Untrusted Search Path •