Vulnerabilities > Keepass > Keepass > 1.32

DATE CVE VULNERABILITY TITLE RISK
2023-01-22 CVE-2023-24055 Cleartext Storage of Sensitive Information vulnerability in Keepass
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger.
local
low complexity
keepass CWE-312
5.5
2017-07-17 CVE-2017-1000066 Unspecified vulnerability in Keepass 1.32
The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information.
network
low complexity
keepass
5.0
2017-01-23 CVE-2016-5119 Improper Input Validation vulnerability in Keepass
The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and supplying a crafted update.
network
high complexity
keepass CWE-20
5.1