Vendors / 1password Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now 1password records in CISA KEV No 1password vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1Password SCIM bridge prior to 0.7.3.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00869 · Published 2020-10-27 · No fix listed
Priority LOW 37
The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability.
CVSS 3.0 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0789 · Published 2018-10-05 · No fix listed CWE-20
Priority LOW 36
1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00313 · Published 2024-08-06 · No fix listed CWE-1289
Priority LOW 34
A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00472 · Published 2021-07-26 · No fix listed CWE-427
Priority LOW 31
The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00934 · Published 2021-09-29 · No fix listed
Priority LOW 31
1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0103 · Published 2021-02-08 · No fix listed CWE-287
Priority LOW 29
1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms.
CVSS 3.1 MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.00201 · Published 2024-08-06 · No fix listed CWE-1289
Priority LOW 27
AgileBits 1Password through 1.0.9.340 allows security feature bypass
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00886 · Published 2020-01-09 · No fix listed CWE-200
Priority LOW 25
1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00474 · Published 2021-07-15 · No fix listed CWE-20
Priority LOW 24
1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00162 · Published 2022-05-09 · No fix listed CWE-312
Priority LOW 23
An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service.
CVSS 3.1 MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00542 · Published 2022-06-15 · No fix listed
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP head…
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00984 · Published 2012-12-28 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 9 0 0
THREATIST.IORead the docs