4 results · Feed
-
Low 3.3
KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size
KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of me…
-
High 7.5CVE-2023-32784 Public exploit
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a wor…
-
Unscored —CVE-2022-0725 Public exploit
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads t…
-
Unscored —
KeePass 2.4.1 allows CSV injection in the title field of a CSV export.