Lucene search
K

63 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.0 views

Linux Distros Unpatched Vulnerability : CVE-2026-4158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate...

7.3CVSS7.5AI score0.00016EPSS
Exploits0References2
NVD
NVD
added 2026/04/11 1:16 a.m.0 views

CVE-2026-4158

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.3CVSS0.00016EPSS
Exploits0References2
OSV
OSV
added 2026/04/11 1:16 a.m.0 views

UBUNTU-CVE-2026-4158

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.3CVSS6.2AI score0.00016EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/11 12:17 a.m.29 views

CVE-2026-4158 KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.3CVSS0.00016EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/11 12:17 a.m.1 views

EUVD-2026-21645

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.3CVSS7.5AI score0.00016EPSS
Exploits0References2
CVE
CVE
added 2026/04/11 12:17 a.m.31 views

CVE-2026-4158

PT-2026-25837 describes a Local Privilege Escalation in KeePassXC tied to OpenSSL configuration with an Uncontrolled Search Path Element. The provided excerpt does not include affected versions, root-cause specifics, remediation steps, or exploitation status. No CVE details are provided here. Mon...

7.3CVSS7.5AI score0.00016EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/04/11 12:17 a.m.1 views

CVE-2026-4158

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.3CVSS7.8AI score0.00016EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/04/11 12:17 a.m.3 views

CVE-2026-4158

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.3CVSS7.5AI score0.00016EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/11 12:17 a.m.1 views

CVE-2026-4158 KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.3CVSS6.2AI score0.00016EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/11 12:0 a.m.1 views

KeePassXC 代码问题漏洞

KeePassXC is an open-source cross-platform password manager. KeePassXC has code vulnerabilities, which stem from uncontrolled OpenSSL configuration paths, potentially leading to local privilege escalation...

7.3CVSS7.2AI score0.00016EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/20 12:0 a.m.4 views

KeePassXC < 2.7.12 Local Privilege Escalation

The version of KeePassXC installed on the remote Windows host is prior to 2.7.12. It is, therefore, affected by a local privilege escalation vulnerability due to loading OpenSSL configuration from an unsecured location. A local attacker with low-privileged access could leverage this vulnerability...

7.3CVSS7.3AI score0.00016EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.1 views

PT-2026-25837

Name of the Vulnerable Software and Affected Versions KeePassXC affected versions not specified Description KeePassXC installations are susceptible to local privilege escalation. An attacker who can execute low-privileged code may be able to gain elevated access. This issue is related to the...

7.3CVSS7.1AI score0.00016EPSS
Exploits0References10
Zero Day Initiative
Zero Day Initiative
added 2026/03/16 12:0 a.m.1 views

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

7.3CVSS6.2AI score0.00016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/18 12:36 a.m.4 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

7.1CVSS6.8AI score0.00016EPSS
Exploits0References1
NVD
NVD
added 2025/12/17 6:15 p.m.3 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

7.1CVSS0.00016EPSS
Exploits0References2
OSV
OSV
added 2025/12/17 6:15 p.m.3 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

7.1CVSS6.5AI score
Exploits0References2
Cvelist
Cvelist
added 2025/12/17 12:0 a.m.21 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

0.00016EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.1 views

KeePassXC-Browser 安全漏洞

KeePassXC-Browser is an open source browser extension for KeePassXC. A security vulnerability exists in KeePassXC-Browser version 1.9.9.2 and earlier, which stems from auto-populating credentials in a sandboxed document, which could lead to credential disclosure...

7.1CVSS6.6AI score0.00016EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.2 views

PT-2025-51850

Name of the Vulnerable Software and Affected Versions KeePassXC-Browser versions through 1.9.9.2 Description The software autofills or prompts users to fill stored credentials into documents rendered under a browser-enforced Content Security Policy CSP directive and iframe attribute sandbox. This...

7.1CVSS6.5AI score0.00016EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/17 12:0 a.m.2 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

6.4AI score0.00016EPSS
Exploits0References2
Rows per page
Query Builder