Browse CVEs

HIGH 7.5 CVE-2023-32784 In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer … Keepass 2.54+ Fix from $1,9502023-05-15 MEDIUM 5.5 CVE-2023-24055 KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext pass… Keepass after 2.53 Fix from $1,6002023-01-22 HIGH 7.8 CVE-2019-20184 KeePass 2.4.1 allows CSV injection in the title field of a CSV export. Keepass Mitigation only Fix from $1,9502020-01-09 HIGH 7.5 CVE-2017-1000066 The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosu… Keepass Mitigation only Fix from $1,9502017-07-17 HIGH 7.5 CVE-2016-5119 The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check r… Keepass after 2.33 Fix from $1,9502017-01-23 MEDIUM 6.9 CVE-2010-5196 Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in … Password Safe after 2.10 Fix from $1,6002012-09-06 MEDIUM 6.9 CVE-2010-5200 Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current … Keepass after 1.17 Fix from $1,6002012-09-06