Known vulnerabilities in OpenSSL - page 12

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 243
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 243 known vulnerabilities: 2 critical, 15 high, 146 medium, 80 low Critical High Medium Low

Vulnerabilities (243)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU45695 - NULL Pointer Dereference
CVE-2009-1387
CWE-476 Medium
No
No
1.0.0 14.08.2020 SB2009060401
SB2009120904
#VU260 - NULL Pointer Dereference
CVE-2004-0079
CWE-476 Medium
No
No
- 02.08.2016 SB2004112302
#VU259 - Permissions, Privileges, and Access Controls
CVE-2004-0112
CWE-264 Medium
No
No
- 02.08.2016 SB2004112301
#VU257 - Exposure of sensitive information to an unauthorized actor
CVE-2003-0131
CWE-200 High
No
No
- 02.08.2016 SB2003032401
#VU246 - Improper input validation
CVE-2003-0851
CWE-20 Medium
No
No
- 01.08.2016 SB2003120101
#VU43974 - Cryptographic Issues
CVE-2011-5095
CWE-310 Medium
No
No
- 20.06.2012 SB2012062003
#VU32808 - Out-of-bounds read
CVE-2012-2333
CWE-125 Medium
No
No
0.9.8x, 1.0.1c 15.05.2012 SB2012051504
SB2012051409
SB2012053102
and 4 more
#VU44124 - Improper input validation
CVE-2012-2131
CWE-20 Medium
No
No
- 24.04.2012 SB2012042401
SB2012091202
SB2012052305
and 1 more
#VU32816 - Memory corruption
CVE-2012-2110
CWE-119 Medium
Available
No
0.9.8v, 1.0.1a 19.04.2012 SB2012041901
SB2012042301
SB2012091202
and 4 more
#VU32820 - Cryptographic Issues
CVE-2012-0884
CWE-310 Medium
No
No
0.9.8u, 1.0.0h 13.03.2012 SB2012031301
SB2012031308
#VU33326 - Improper input validation
CVE-2012-0050
CWE-20 Medium
No
No
0.9.8t 19.01.2012 SB2012011901
SB2012011909
SB2012012503
#VU44416 - Resource Management Errors
CVE-2011-4109
CWE-399 High
No
No
- 06.01.2012 SB2012010601
#VU32855 - Permissions, Privileges, and Access Controls
CVE-2011-3207
CWE-264 Medium
No
No
1.0.0e 22.09.2011 SB2011092202
SB2011090609
SB2011101102
#VU32856 - Resource Management Errors
CVE-2011-3210
CWE-399 Medium
No
No
0.9.8s 22.09.2011 SB2011092203
SB2011090610
#VU45308 - Resource Management Errors
CVE-2011-0014
CWE-399 Medium
No
No
- 19.02.2011 SB2011021903
SB2012010508
SB2011021102
and 1 more
#VU33336 - Improper input validation
CVE-2010-2939
CWE-20 Medium
Available
No
1.0.0b 17.08.2010 SB2010081701
SB2010100801
#VU32863 - Cryptographic Issues
CVE-2009-2409
CWE-310 Medium
No
No
0.9.8l 30.07.2009 SB2009073004
SB2009120905
#VU33337 - Memory corruption
CVE-2009-1377
CWE-119 Medium
No
No
0.9.8l 19.05.2009 SB2009051901
SB2009120901
#VU33338 - Resource Management Errors
CVE-2009-1378
CWE-399 Medium
No
No
0.9.8l 19.05.2009 SB2009051902
SB2009120902
#VU33339 - Use After Free
CVE-2009-1379
CWE-416 Medium
Available
No
1.0.0a 19.05.2009 SB2009051903
SB2009120903


Showing elements 221 - 240 out of 243