Known vulnerabilities in OpenSSL - page 7

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 220
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 220 known vulnerabilities: 2 critical, 15 high, 130 medium, 73 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU9595 - Buffer overflow
CVE-2017-3738
CWE-120 Low
No
No
- 08.12.2017 SB2017120804
SB2017120902
SB2017121001
and 18 more
#VU9109 - Cryptographic Issues
CVE-2017-3736
CWE-310 Low
No
No
- 02.11.2017 SB2017110221
SB2017110302
SB2017110401
and 34 more
#VU8487 - Out-of-bounds read
CVE-2017-3735
CWE-125 Low
No
No
- 28.08.2017 SB2017082906
SB2017110401
SB2017110402
and 30 more
#VU5894 - Cryptographic Issues
CVE-2016-7055
CWE-310 Low
No
No
- 23.02.2017 SB2016101004
SB2017022301
SB2017021407
and 10 more
#VU5893 - NULL Pointer Dereference
CVE-2016-7053
CWE-476 Medium
No
No
- 23.02.2017 SB2016101004
#VU5892 - Heap-based Buffer Overflow
CVE-2016-7054
CWE-122 Medium
Available
No
- 23.02.2017 SB2016101004
SB2023112104
#VU5839 - Improper input validation
CVE-2017-3733
CWE-20 Medium
No
No
- 16.02.2017 SB2017021604
#VU5420 - Out-of-bounds read
CVE-2017-3731
CWE-125 Medium
No
No
- 27.01.2017 SB2017012701
SB2017022301
SB2017021407
and 16 more
#VU5440 - NULL Pointer Dereference
CVE-2017-3730
CWE-476 Low
Available
No
- 27.01.2017 SB2017012701
SB2017021407
SB2018042443
and 1 more
#VU5442 - Cryptographic Issues
CVE-2017-3732
CWE-310 Low
No
No
- 27.01.2017 SB2017012701
SB2017022301
SB2017021407
and 25 more
#VU4133 - Cryptographic Issues
CVE-2016-7056
CWE-310 Low
No
No
- 10.01.2017 SB2017011002
SB2017060704
SB2017013102
and 4 more
#VU1975 - Improper input validation
CVE-2016-2181
CWE-20 Medium
No
No
1.0.1u, 1.0.2i 21.12.2016 SB2018021614
SB2016091928
SB2023030219
and 14 more
#VU1974 - Resource Management Errors
CVE-2016-2179
CWE-399 Medium
No
No
1.0.1u, 1.0.2i 21.12.2016 SB2018021614
SB2016091930
SB2023030219
and 14 more
#VU1589 - Observable discrepancy
CVE-2016-2178
CWE-203 Low
No
No
1.0.1u, 1.0.2i 21.12.2016 SB2018021614
SB2016062205
SB2023022033
and 18 more
#VU820 - Buffer overflow
CVE-2016-6305
CWE-120 Low
No
No
- 10.10.2016 SB2016092206
SB2016092235
SB2016120705
and 1 more
#VU819 - Resource exhaustion
CVE-2016-6304
CWE-400 Low
No
No
- 10.10.2016 SB2016092206
SB2016092237
SB2016120705
and 9 more
#VU818 - Resource exhaustion
CVE-2016-6308
CWE-400 Low
No
No
- 10.10.2016 SB2016092613
SB2023030219
SB2018110640
and 2 more
#VU817 - Resource exhaustion
CVE-2016-6307
CWE-400 Low
No
No
- 10.10.2016 SB2016092612
SB2016092236
SB2023030219
and 3 more
#VU661 - Use After Free
CVE-2016-6309
CWE-416 High
No
No
- 26.09.2016 SB2016092602
SB2023030219
#VU660 - NULL Pointer Dereference
CVE-2016-7052
CWE-476 Medium
No
No
- 26.09.2016 SB2016092602
SB2016092803
SB2016092705
and 8 more


Showing elements 121 - 140 out of 220