Keepassx

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:keepassx_project:keepassx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKeepassx Project (d71ccd8c-a2ff-5ac6-a219-308b5b9d9baf)
ProductKeepassx (749d7d03-0227-52e6-8031-4768f0cbf40f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/chenwencai/keepassx purl2cpe 2026-06-01 10:11:59.337715
pkg:deb/debian/keepassx purl2cpe 2026-06-01 10:11:59.337717
pkg:deb/ubuntu/keepassx purl2cpe 2026-06-01 10:11:59.337719
pkg:github/keepassx/keepassx purl2cpe 2026-06-01 10:11:59.337720
pkg:github/keepassxreboot/keepassxc-org purl2cpe 2026-06-01 10:11:59.337722
pkg:github/keepassxreboot/keepassxc-packaging purl2cpe 2026-06-01 10:11:59.337723
pkg:github/keepassxreboot/keepassxc-specs purl2cpe 2026-06-01 10:11:59.337724
pkg:gnome/keepassx purl2cpe 2026-06-01 10:11:59.337726
pkg:golang/github.com/keepassxreboot/keepassxc purl2cpe 2026-06-01 10:11:59.337727
pkg:rpm/fedora/keepassx purl2cpe 2026-06-01 10:11:59.337729
pkg:rpm/opensuse/keepassx purl2cpe 2026-06-01 10:11:59.337730
pkg:sourceforge/keepassx purl2cpe 2026-06-01 10:11:59.337731

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8378 vulnerable 2026-06-08 05:07:03.805103 Details available
In KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML export action. This allows context-dependent attackers to obtain sensitive information by reading the .xml dotfile.
Published: 2017-04-10T14:00:00.000Z
Updated: 2024-08-06T08:13:32.662Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.