Known vulnerabilities in OpenSSL - page 8

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 220
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 220 known vulnerabilities: 2 critical, 15 high, 130 medium, 73 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70420 - NULL Pointer Dereference
CVE-2015-1790
CWE-476 Medium
No
No
0.9.8zg, 1.0.0s, 1.0.1n, 1.0.2b 19.12.2022 SB2015061206
SB2017050813
SB2015042108
and 6 more
#VU70419 - Memory corruption
CVE-2015-1789
CWE-119 Medium
No
No
0.9.8zg, 1.0.0s, 1.0.1n, 1.0.2b 19.12.2022 SB2015061205
SB2017050813
SB2015042106
and 8 more
#VU70417 - Resource Management Errors
CVE-2015-1788
CWE-399 Medium
No
No
0.9.8s, 1.0.0e, 1.0.1n, 1.0.2b 19.12.2022 SB2015061204
SB2017050813
SB2015042106
and 6 more
#VU70416 - Improper input validation
CVE-2015-1787
CWE-20 Low
No
No
1.0.2a 19.12.2022 SB2015032010
SB2023030212
SB2016051110
and 1 more
#VU70415 - Improper input validation
CVE-2015-0293
CWE-20 Medium
No
No
0.9.8zf, 1.0.0r, 1.0.1m, 1.0.2a 19.12.2022 SB2022121913
SB2023030212
SB2016051110
and 8 more
#VU70403 - NULL Pointer Dereference
CVE-2015-0288
CWE-476 Medium
No
No
0.9.8zf, 1.0.0r, 1.0.1m, 1.0.2a 16.12.2022 SB2015121619
SB2023030212
SB2016051110
and 8 more
#VU1968 - Out-of-bounds write
CVE-2016-2182
CWE-787 High
No
No
1.0.1u, 1.0.2i 21.12.2016 SB2018021614
SB2016091935
SB2023022033
and 14 more
#VU1962 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0702
CWE-200 Low
No
No
- 21.12.2016 SB2016030101
SB2018050202
SB2018062207
and 14 more
#VU1914 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-0800
CWE-327 Medium
Available
No
- 21.12.2016 SB2016030101
SB2016030102
SB2023041307
and 13 more
#VU642 - Buffer over-read
CVE-2016-2176
CWE-126 Low
No
No
- 23.09.2016 SB2016050507
SB2016091934
SB2016050404
and 2 more
#VU641 - Improper input validation
CVE-2016-2109
CWE-119 Low
No
No
- 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more
#VU640 - Improper input validation
CVE-2016-2105
CWE-20 Low
No
No
- 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU639 - Improper Access Control
CVE-2016-2107
CWE-284 High
Available
No
- 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183
CWE-327 Low
Available
No
- 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 49 more
#VU308 - Out-of-bounds read
CVE-2016-2180
CWE-125 Medium
No
No
1.0.1u, 1.0.2i 13.08.2016 SB2016081301
SB2018021614
SB2016090301
and 14 more
#VU24 - Download of Code Without Integrity Check
CVE-2016-2177
CWE-119 Medium
No
No
- 24.06.2016 SB2016081301
SB2017013102
SB2018021614
and 19 more
#VU33809 - Improper input validation
CVE-2016-2106
CWE-20 Medium
No
No
1.0.1t 05.05.2016 SB2016050513
SB2016051903
SB2016051204
and 21 more
#VU32244 - Improper input validation
CVE-2016-0797
CWE-20 Medium
No
No
1.0.1s 03.03.2016 SB2016030304
SB2016061413
SB2016091925
and 9 more
#VU33290 - Security Features
CVE-2015-1793
CWE-254 Medium
No
No
1.0.1o 09.07.2015 SB2015070905
SB2015070906
SB2015070907
and 5 more
#VU40720 - Memory corruption
CVE-2014-8176
CWE-119 Medium
No
No
- 12.06.2015 SB2015061202
SB2017050813
SB2015042111
and 3 more


Showing elements 141 - 160 out of 220