KeePass records

8 published records for vendor keepass.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 25%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2023-32784Proof of concept	In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or nkeepass · keepass · CWE-319 Pre-auth Weak crypto	High7.5	—	4.4%	May 15, 2023
31Monitor	CVE-2022-0725Proof of concept	A flaw was found in keepass.keepass · keepass · CWE-200 Pre-auth Info leak	High7.5	—	2.5%	Mar 10, 2022
31Monitor	CVE-2016-5119No exploit	The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the versiokeepass · keepass · CWE-20 pre-auth RCE	High7.5	—	2.3%	Jan 23, 2017
31Monitor	CVE-2019-20184No exploit	KeePass 2.4.1 allows CSV injection in the title field of a CSV export.keepass · keepass · CWE-1236	High7.8	—	1.6%	Jan 9, 2020
30Monitor	CVE-2017-1000066No exploit	The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in thekeepass · keepass Pre-auth	High7.5	—	1.4%	Jul 17, 2017
27Monitor	CVE-2010-5196No exploit	Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dllkeepass · password safe Local privilege escalation	Medium6.9	—	0.6%	Sep 6, 2012
27Monitor	CVE-2010-5200No exploit	Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in thekeepass · keepass Local privilege escalation	Medium6.9	—	0.4%	Sep 6, 2012
23Monitor	CVE-2023-24055Proof of concept	KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the clearkeepass · keepass · CWE-312	Medium5.5	—	3.7%	Jan 22, 2023

CVE-2023-32784
31Monitor
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or n
HighCVSS 7.5Proof of conceptEPSS 4%
- Pre-auth
- Weak crypto
keepass · keepassMay 15, 2023
CVE-2022-0725
31Monitor
A flaw was found in keepass.
HighCVSS 7.5Proof of conceptEPSS 2%
- Pre-auth
- Info leak
keepass · keepassMar 10, 2022
CVE-2016-5119
31Monitor
The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the versio
HighCVSS 7.5No exploitEPSS 2%
- pre-auth RCE
keepass · keepassJan 23, 2017
CVE-2019-20184
31Monitor
KeePass 2.4.1 allows CSV injection in the title field of a CSV export.
HighCVSS 7.8No exploitEPSS 2%
keepass · keepassJan 9, 2020
CVE-2017-1000066
30Monitor
The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
keepass · keepassJul 17, 2017
CVE-2010-5196
27Monitor
Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll
MediumCVSS 6.9No exploitEPSS 1%
- Local privilege escalation
keepass · password safeSep 6, 2012
CVE-2010-5200
27Monitor
Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the
MediumCVSS 6.9No exploitEPSS 0%
- Local privilege escalation
keepass · keepassSep 6, 2012
CVE-2023-24055
23Monitor
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the clear
MediumCVSS 5.5Proof of conceptEPSS 4%
keepass · keepassJan 22, 2023