Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2026-03606 CVE-2026-4158 · GHSA-h7gx-vxj4-mr6x

Uncontrolled search path in KeePassXC

Priority HIGH 67

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00226 Published 2026-04-11 No fix listed CWE-427
Priority LOW 30

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandb…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00137 Published 2025-12-17 No fix listed CWE-352
Priority MEDIUM 58

In KeePassXC through 2.7.5, a local attacker can make changes to the Database security settings, including master password and second-factor authentication, within an authenticated KeePassXC Database session, without the…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00239 Published 2023-06-19 No fix listed CWE-863