Known vulnerabilities in OpenSSL - page 10

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 220
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 220 known vulnerabilities: 2 critical, 15 high, 130 medium, 73 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11536 - Resource Management Errors
CVE-2014-3470
CWE-399 Low
No
No
- 04.04.2018 SB2014060503
SB2015060501
SB2015061201
and 18 more
#VU11535 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2010-5298
CWE-362 Medium
No
No
- 04.04.2018 SB2014060503
SB2015050501
SB2014072701
and 10 more
#VU11534 - NULL Pointer Dereference
CVE-2014-0198
CWE-476 Medium
No
No
- 04.04.2018 SB2014060503
SB2015050501
SB2015092635
and 12 more
#VU11533 - Memory corruption
CVE-2014-0195
CWE-119 High
Available
No
- 04.04.2018 SB2014060503
SB2015060501
SB2015061201
and 16 more
#VU11532 - Resource Management Errors
CVE-2014-0221
CWE-399 Medium
No
No
- 04.04.2018 SB2014060503
SB2015060501
SB2015061201
and 18 more
#VU5373 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0160
CWE-200 Critical
Available
Exploited
- 25.01.2017 SB2014040101
SB2015092619
SB2014040801
and 28 more
#VU41413 - Improper input validation
CVE-2014-3511
CWE-20 Medium
No
No
- 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41414 - Memory corruption
CVE-2014-3512
CWE-119 Medium
No
No
- 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 2 more
#VU41415 - Improper input validation
CVE-2014-5139
CWE-20 Medium
No
No
- 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 7 more
#VU32588 - NULL Pointer Dereference
CVE-2013-4353
CWE-476 Medium
No
No
1.0.1f 09.01.2014 SB2014010901
SB2014011408
SB2014011415
and 4 more
#VU32590 - Cryptographic Issues
CVE-2013-6450
CWE-310 Medium
No
No
1.0.0l 01.01.2014 SB2014010102
SB2014011410
SB2014011415
and 3 more
#VU32589 - Cryptographic Issues
CVE-2013-6449
CWE-310 Medium
No
No
1.0.2 24.12.2013 SB2013122403
SB2014011409
SB2014011415
and 3 more
#VU33317 - Cryptographic Issues
CVE-2013-0169
CWE-310 Low
Available
No
0.9.8z, 1.0.0l, 1.0.1e-25.el7 08.02.2013 SB2013020805
SB2013020606
SB2014040702
and 4 more
#VU32723 - Cryptographic Issues
CVE-2012-2686
CWE-310 Medium
Available
No
1.0.1d 08.02.2013 SB2013020803
SB2013020604
SB2013021001
#VU32724 - NULL Pointer Dereference
CVE-2013-0166
CWE-476 Medium
No
No
0.9.8y, 1.0.1d 08.02.2013 SB2013020804
SB2013020605
SB2013021001
and 1 more
#VU43974 - Cryptographic Issues
CVE-2011-5095
CWE-310 Medium
No
No
- 20.06.2012 SB2012062003
#VU32808 - Out-of-bounds read
CVE-2012-2333
CWE-125 Medium
No
No
0.9.8x, 1.0.1c 15.05.2012 SB2012051504
SB2012051409
SB2012053102
and 4 more
#VU44124 - Improper input validation
CVE-2012-2131
CWE-20 Medium
No
No
- 24.04.2012 SB2012042401
SB2012091202
SB2012052305
and 1 more
#VU32816 - Memory corruption
CVE-2012-2110
CWE-119 Medium
Available
No
0.9.8v, 1.0.1a 19.04.2012 SB2012041901
SB2012042301
SB2012091202
and 4 more
#VU2950 - Cryptographic Issues
CVE-2014-0224
CWE-310 Medium
Available
No
- 30.11.-0001 SB2014060501
SB2014060502
SB2014060503
and 42 more


Showing elements 181 - 200 out of 220