Approved changes feed: RSS · Atom
cpe:2.3:a:keepass:keepass:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Keepass (5de0548a-9839-552d-818c-a7d4eb68e3f1) |
|---|---|
| Product | Keepass (3b5d2960-5051-5a84-99be-ed56ea7807aa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/keepass2 |
purl2cpe | 2026-06-01 10:15:34.690694 |
pkg:deb/ubuntu/keepass2 |
purl2cpe | 2026-06-01 10:15:34.690698 |
pkg:github/dlech/keepass2.x |
purl2cpe | 2026-06-01 10:15:34.690701 |
pkg:nuget/KeePass |
purl2cpe | 2026-06-01 10:15:34.690704 |
pkg:rpm/fedora/keepass |
purl2cpe | 2026-06-01 10:15:34.690708 |
pkg:rpm/opensuse/keepass |
purl2cpe | 2026-06-01 10:15:34.690711 |
pkg:sourceforge/keepass |
purl2cpe | 2026-06-01 10:15:34.690714 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32784 |
vulnerable | 2026-06-08 06:04:47.209409 |
Details available
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.
Published: 2023-05-15T00:00:00.000Z
Updated: 2025-01-23T19:29:40.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24055 |
vulnerable | 2026-06-08 05:56:05.121993 |
Details available
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.
Published: 2023-01-22T00:00:00.000Z
Updated: 2024-08-02T10:49:08.940Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5119 |
vulnerable | 2026-06-08 05:07:56.363019 |
Details available
The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and supplying a crafted update.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T00:53:47.366Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5200 |
vulnerable | 2026-06-08 04:56:32.487058 |
Details available
Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information.
Published: 2012-09-06T10:00:00.000Z
Updated: 2024-09-16T18:44:42.072Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.