Vendors / Logmein Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Logmein records in CISA KEV No Logmein vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04671 · Published 2018-04-18 · No fix listed CWE-400
Priority LOW 38
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjac…
CVSS 3.1 HIGH 8.2· Network · No auth · User interaction · EPSS 0.0118 · Published 2019-09-16 · No fix listed CWE-1021
Priority LOW 31
LastPass prior to 2.5.1 has an insecure PIN implementation.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00586 · Published 2020-01-31 · No fix listed CWE-522
Priority LOW 28
An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS.
CVSS 3.1 MEDIUM 5.7· Physical · No auth · No interaction · EPSS 0.0048 · Published 2020-12-12 · No fix listed CWE-287
Priority LOW 28
LastPass prior to 2.5.1 allows secure wipe bypass.
CVSS 3.1 MEDIUM 6.1· Physical · No auth · No interaction · EPSS 0.00585 · Published 2020-01-31 · No fix listed CWE-287
Priority LOW 26
An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS.
CVSS 3.1 MEDIUM 5.7· Physical · No auth · No interaction · EPSS 0.00476 · Published 2020-12-12 · No fix listed CWE-287
Open these records in search → All records by CVSS severity
1 2 4 0 0
THREATIST.IORead the docs