logmein records
7 published records for vendor logmein.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-287 Improper Authentication3
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames1
- CWE-399 Resource Management Errors1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-522 Insufficiently Protected Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2008-7053Proof of concept | LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcollogmein · ractrl.dll · CWE-399 | Critical9.3 | — | 6.5% | Aug 24, 2009 |
32Monitor | CVE-2019-16371No exploit | LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a prlogmein · lastpass · CWE-1021 | High8.2 | — | 1.1% | Sep 16, 2019 |
31Monitor | CVE-2018-10193No exploit | LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resourclogmein · lastpass · CWE-400 | High7.5 | — | 4.6% | Apr 17, 2018 |
27Monitor | CVE-2013-5113No exploit | LastPass prior to 2.5.1 has an insecure PIN implementation.logmein · lastpass · CWE-522 | Medium6.8 | — | 0.5% | Jan 31, 2020 |
24Monitor | CVE-2013-5114No exploit | LastPass prior to 2.5.1 allows secure wipe bypass.logmein · lastpass · CWE-287 | Medium6.1 | — | 0.5% | Jan 31, 2020 |
22Monitor | CVE-2020-35208No exploit | An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS.logmein · lastpass · CWE-287 | Medium5.7 | — | 0.4% | Dec 12, 2020 |
22Monitor | CVE-2020-35207No exploit | An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS.logmein · lastpass · CWE-287 | Medium5.7 | — | 0.4% | Dec 12, 2020 |
- CVE-2008-705339Monitor
LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcol
CriticalCVSS 9.3Proof of conceptEPSS 6%logmein · ractrl.dllAug 24, 2009
- CVE-2019-1637132Monitor
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a pr
HighCVSS 8.2No exploitEPSS 1%logmein · lastpassSep 16, 2019
- CVE-2018-1019331Monitor
LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resourc
HighCVSS 7.5No exploitEPSS 4%logmein · lastpassApr 17, 2018
- CVE-2013-511327Monitor
LastPass prior to 2.5.1 has an insecure PIN implementation.
MediumCVSS 6.8No exploitEPSS 0%logmein · lastpassJan 31, 2020
- CVE-2013-511424Monitor
LastPass prior to 2.5.1 allows secure wipe bypass.
MediumCVSS 6.1No exploitEPSS 0%logmein · lastpassJan 31, 2020
- CVE-2020-3520822Monitor
An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS.
MediumCVSS 5.7No exploitEPSS 0%logmein · lastpassDec 12, 2020
- CVE-2020-3520722Monitor
An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS.
MediumCVSS 5.7No exploitEPSS 0%logmein · lastpassDec 12, 2020