Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-16272

The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote attackers to read and modify data in the KeePass database via an A=0 WebSocket connection.

CVSS 3.1 · 9.1 Critical EPSS 2.8% KEV · Not listed
Vendors
Kee
Products
Keepassrpc
CVE-2020-16271

The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket connection.

CVSS 3.1 · 9.1 Critical EPSS 1.5% KEV · Not listed
Vendors
Kee
Products
Keepassrpc