Skip to main content

Logmein

4 CVEs vendor

Monthly

CVE-2020-35208 Dec 12, 19:15 MEDIUM POC This Month

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. Rated medium severity (CVSS 5.7), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Lastpass Logmein
NVD GitHub
CVSS 3.1
5.7
EPSS
0.5%
CVE-2020-35207 Dec 12, 19:15 MEDIUM POC This Month

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. Rated medium severity (CVSS 5.7), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Lastpass Logmein
NVD GitHub
CVSS 3.1
5.7
EPSS
0.5%
CVE-2019-16371 Sep 16, 18:15 HIGH POC This Week

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Lastpass Logmein
NVD
CVSS 3.1
8.2
EPSS
1.2%
CVE-2018-10193 Apr 18, 00:29 HIGH POC This Week

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Lastpass Logmein
NVD
CVSS 3.0
7.5
EPSS
4.8%
EPSS 0% CVSS 5.7
MEDIUM POC This Month

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. Rated medium severity (CVSS 5.7), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Lastpass Logmein
NVD GitHub
EPSS 0% CVSS 5.7
MEDIUM POC This Month

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. Rated medium severity (CVSS 5.7), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Lastpass Logmein
NVD GitHub
EPSS 1% CVSS 8.2
HIGH POC This Week

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Lastpass Logmein
NVD
EPSS 5% CVSS 7.5
HIGH POC This Week

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Lastpass Logmein
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy