Known vulnerabilities in OpenSSL - page 9

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 220
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 220 known vulnerabilities: 2 critical, 15 high, 130 medium, 73 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70414 - Memory corruption
CVE-2015-0292
CWE-119 Medium
No
No
0.9.8za, 1.0.0m, 1.0.1h 19.12.2022 SB2015032009
SB2023030212
SB2016051110
and 4 more
#VU70413 - Use After Free
CVE-2015-0209
CWE-416 Medium
No
No
0.9.8zf, 1.0.0r, 1.0.1m, 1.0.2a 19.12.2022 SB2015032008
SB2023030212
SB2016051110
and 8 more
#VU70407 - Improper input validation
CVE-2015-0286
CWE-20 Medium
No
No
0.9.8zf, 1.0.0r, 1.0.1m, 1.0.2a 16.12.2022 SB2015032007
SB2023030212
SB2016051110
and 9 more
#VU70404 - Memory corruption
CVE-2015-0287
CWE-119 Medium
No
No
0.9.8zf, 1.0.0r, 1.0.1m, 1.0.2a 16.12.2022 SB2015032006
SB2023030212
SB2016051110
and 8 more
#VU70402 - NULL Pointer Dereference
CVE-2015-0289
CWE-476 Medium
No
No
0.9.8zf, 1.0.0r, 1.0.1m, 1.0.2a 16.12.2022 SB2015032005
SB2023030212
SB2016051110
and 8 more
#VU70401 - NULL Pointer Dereference
CVE-2015-0208
CWE-476 Medium
No
No
1.0.2a 16.12.2022 SB2015032004
SB2023030212
SB2016051110
and 1 more
#VU70400 - Cryptographic Issues
CVE-2015-0285
CWE-310 Low
No
No
1.0.2a 16.12.2022 SB2015032004
SB2023030212
SB2016051110
and 1 more
#VU70399 - NULL Pointer Dereference
CVE-2015-0290
CWE-476 Medium
No
No
1.0.2a 16.12.2022 SB2015032004
SB2023030212
SB2016051110
and 1 more
#VU70398 - NULL Pointer Dereference
CVE-2015-0291
CWE-476 Medium
No
No
1.0.2a 16.12.2022 SB2015032004
SB2023030212
SB2015031902
#VU70397 - Improper input validation
CVE-2015-0207
CWE-20 Medium
No
No
1.0.2a 16.12.2022 SB2015032004
SB2023030212
SB2016051110
and 1 more
#VU5215 - Exposed Dangerous Method or Function
CVE-2014-3568
CWE-749 Low
No
No
- 20.01.2017 SB2014101601
SB2015092611
SB2014101501
and 17 more
#VU5214 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2014-3566
CWE-327 Medium
Available
No
- 20.01.2017 SB2014101601
SB2014102102
SB2016022401
and 78 more
#VU5213 - Missing release of memory after effective lifetime
CVE-2014-3567
CWE-401 Medium
No
No
- 20.01.2017 SB2014101601
SB2015101602
SB2015092611
and 20 more
#VU5212 - Missing release of memory after effective lifetime
CVE-2014-3513
CWE-401 Medium
No
No
- 20.01.2017 SB2014101601
SB2015101602
SB2015092611
and 14 more
#VU41407 - Improper input validation
CVE-2014-3505
CWE-20 Medium
No
No
- 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41408 - Resource Management Errors
CVE-2014-3506
CWE-399 Medium
No
No
- 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41409 - Missing release of memory after effective lifetime
CVE-2014-3507
CWE-401 Medium
No
No
0.9.8zb, 1.0.0n, 1.0.1i 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41410 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3508
CWE-200 Medium
No
No
- 14.08.2014 SB2014081406
SB2014080704
SB2014080902
and 11 more
#VU41411 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-3509
CWE-362 Medium
No
No
- 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 9 more
#VU41412 - Improper input validation
CVE-2014-3510
CWE-20 Medium
No
No
- 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more


Showing elements 161 - 180 out of 220