Lucene search
+L

4 matches found

osv_cve
osv_cve
•added 2020/08/03 5:15 p.m.•34 views

CVE-2020-16271

The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket connection...

9.1CVSS6.8AI score
SaveExploits0References2
Mend
Mend
•added 2020/08/03 4:19 p.m.•4 views

CVE-2020-16271

The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket connection...

9.3CVSS0.01506EPSS
SaveExploits1References2
Mend
Mend
•added 2020/08/03 4:19 p.m.•4 views

CVE-2020-16272

The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote attackers to read and modify data in the KeePass database via an A=0 WebSocket connection...

9.3CVSS0.02775EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/03 12:00 a.m.•10 views

CVE-2020-16271: Use of Insufficiently Random Values

The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket connection...

9.1CVSS5.8AI score0.01506EPSS
SaveExploits1References2
Rows per page
Query Builder