KE
Product
KeePass
8
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 1Low 1
Watch
Add KeePass to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-20184 | 7.8 | Jan 9 | KeePass 2.4.1 allows CSV injection in the title field of a CSV export Affected: 2.4.1 |
| CVE-2023-32784 | 7.5 | May 15 | In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running Affected: 2.00 before 2.54 |
| CVE-2022-0725 | 7.5 | Mar 10 | A flaw was found in keepass Affected: 2.48 |
| CVE-2017-1000066 | 7.5 | Jul 17 | The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information Affected: 1.32 |
| CVE-2016-5119 | 7.5 | Jan 23 | The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and supplying a… Affected: through 2.33 |
| CVE-2023-24055 | 5.5 | Jan 22 | KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export… Affected: through 2.53 |
| CVE-2026-86776 | 3.3 | Sep 9 | KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size Affected: 2.35 through 2.61.1 |
| CVE-2010-5200 | – | Sep 6 | Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as… Affected: through 1.17 |
Showing 8