Keepass

9 CVEs across 3 Keepass products. Browse Keepass vulnerabilities, severities, and proof-of-concept exploits.

Keepass products with known CVEs

ProductCVEs
Keepass7
Keepass Password Safe1
Password Safe1
Keepass CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-37178High7.52026-02-11KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerabilit…
CVE-2023-32784High7.52023-05-15In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. T…
CVE-2023-24055Medium5.52023-01-22KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by a…
CVE-2022-0725High7.52022-03-10A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability…
CVE-2019-20184High7.82020-01-09KeePass 2.4.1 allows CSV injection in the title field of a CSV export.
CVE-2017-1000066High7.52017-07-17The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sens…
CVE-2016-5119High7.52017-01-23The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response an…
CVE-2010-52002012-09-06Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working di…
CVE-2010-51962012-09-06Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the curren…