Known vulnerabilities in OpenSSL - page 11

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 220
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 220 known vulnerabilities: 2 critical, 15 high, 130 medium, 73 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91588 - Cryptographic Issues
CVE-2015-0204
CWE-310 Medium
No
No
0.9.8zd, 1.0.0p, 1.0.1k 10.06.2024 SB2015010903
SB2018042477
SB2015031902
#VU45695 - NULL Pointer Dereference
CVE-2009-1387
CWE-476 Medium
No
No
1.0.0 14.08.2020 SB2009060401
SB2009120904
#VU260 - NULL Pointer Dereference
CVE-2004-0079
CWE-476 Medium
No
No
- 02.08.2016 SB2004112302
#VU259 - Permissions, Privileges, and Access Controls
CVE-2004-0112
CWE-264 Medium
No
No
- 02.08.2016 SB2004112301
#VU257 - Exposure of sensitive information to an unauthorized actor
CVE-2003-0131
CWE-200 High
No
No
- 02.08.2016 SB2003032401
#VU246 - Improper input validation
CVE-2003-0851
CWE-20 Medium
No
No
- 01.08.2016 SB2003120101
#VU245 - Memory corruption
CVE-2002-0656
CWE-119 Critical
Available
No
- 01.08.2016 SB2002081203
#VU244 - Improper input validation
CVE-2002-0659
CWE-20 Medium
Available
No
- 01.08.2016 SB2002081202
#VU100 - Out-of-bounds write
CVE-2002-0655
CWE-119 High
No
No
- 07.07.2016 SB2002081201
#VU32820 - Cryptographic Issues
CVE-2012-0884
CWE-310 Medium
No
No
0.9.8u, 1.0.0h 13.03.2012 SB2012031301
SB2012031308
#VU33326 - Improper input validation
CVE-2012-0050
CWE-20 Medium
No
No
0.9.8t 19.01.2012 SB2012011901
SB2012011909
SB2012012503
#VU44416 - Resource Management Errors
CVE-2011-4109
CWE-399 High
No
No
- 06.01.2012 SB2012010601
#VU32855 - Permissions, Privileges, and Access Controls
CVE-2011-3207
CWE-264 Medium
No
No
1.0.0e 22.09.2011 SB2011092202
SB2011090609
SB2011101102
#VU32856 - Resource Management Errors
CVE-2011-3210
CWE-399 Medium
No
No
0.9.8s 22.09.2011 SB2011092203
SB2011090610
#VU45308 - Resource Management Errors
CVE-2011-0014
CWE-399 Medium
No
No
- 19.02.2011 SB2011021903
SB2012010508
SB2011021102
and 1 more
#VU33336 - Improper input validation
CVE-2010-2939
CWE-20 Medium
Available
No
1.0.0b 17.08.2010 SB2010081701
SB2010100801
#VU32863 - Cryptographic Issues
CVE-2009-2409
CWE-310 Medium
No
No
0.9.8l 30.07.2009 SB2009073004
SB2009120905
#VU33337 - Memory corruption
CVE-2009-1377
CWE-119 Medium
No
No
0.9.8l 19.05.2009 SB2009051901
SB2009120901
#VU33338 - Resource Management Errors
CVE-2009-1378
CWE-399 Medium
No
No
0.9.8l 19.05.2009 SB2009051902
SB2009120902
#VU33339 - Use After Free
CVE-2009-1379
CWE-416 Medium
Available
No
1.0.0a 19.05.2009 SB2009051903
SB2009120903


Showing elements 201 - 220 out of 220