KeePass kayıtları

keepass üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %25
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

8 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
31İzleyin	CVE-2023-32784Kavram kanıtı	In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or nkeepass · keepass · CWE-319 Kimlik doğrulamasız Zayıf kripto	Yüksek7,5	—	%4,4	15 May 2023
31İzleyin	CVE-2022-0725Kavram kanıtı	A flaw was found in keepass.keepass · keepass · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%2,5	10 Mar 2022
31İzleyin	CVE-2016-5119İstismar yok	The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the versiokeepass · keepass · CWE-20 pre-auth RCE	Yüksek7,5	—	%2,3	23 Oca 2017
31İzleyin	CVE-2019-20184İstismar yok	KeePass 2.4.1 allows CSV injection in the title field of a CSV export.keepass · keepass · CWE-1236	Yüksek7,8	—	%1,6	9 Oca 2020
30İzleyin	CVE-2017-1000066İstismar yok	The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in thekeepass · keepass Kimlik doğrulamasız	Yüksek7,5	—	%1,4	17 Tem 2017
27İzleyin	CVE-2010-5196İstismar yok	Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dllkeepass · password safe Yerel yetki yükseltme	Orta6,9	—	%0,6	6 Eyl 2012
27İzleyin	CVE-2010-5200İstismar yok	Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in thekeepass · keepass Yerel yetki yükseltme	Orta6,9	—	%0,4	6 Eyl 2012
23İzleyin	CVE-2023-24055Kavram kanıtı	KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the clearkeepass · keepass · CWE-312	Orta5,5	—	%3,7	22 Oca 2023

CVE-2023-32784
31İzleyin
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or n
YüksekCVSS 7,5Kavram kanıtıEPSS %4
- Kimlik doğrulamasız
- Zayıf kripto
keepass · keepass15 May 2023
CVE-2022-0725
31İzleyin
A flaw was found in keepass.
YüksekCVSS 7,5Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- Bilgi sızıntısı
keepass · keepass10 Mar 2022
CVE-2016-5119
31İzleyin
The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the versio
YüksekCVSS 7,5İstismar yokEPSS %2
- pre-auth RCE
keepass · keepass23 Oca 2017
CVE-2019-20184
31İzleyin
KeePass 2.4.1 allows CSV injection in the title field of a CSV export.
YüksekCVSS 7,8İstismar yokEPSS %2
keepass · keepass9 Oca 2020
CVE-2017-1000066
30İzleyin
The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
keepass · keepass17 Tem 2017
CVE-2010-5196
27İzleyin
Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll
OrtaCVSS 6,9İstismar yokEPSS %1
- Yerel yetki yükseltme
keepass · password safe6 Eyl 2012
CVE-2010-5200
27İzleyin
Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the
OrtaCVSS 6,9İstismar yokEPSS %0
- Yerel yetki yükseltme
keepass · keepass6 Eyl 2012
CVE-2023-24055
23İzleyin
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the clear
OrtaCVSS 5,5Kavram kanıtıEPSS %4
keepass · keepass22 Oca 2023