Exposure of OpenSSL

Web server extensions
553
exposure score
62,289
sites use
0
exploited
43
critical

CVEs

247 results
CVE-2026-74883HIGHopenssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and ioEPSS 0.5%CVE-2025-66199MEDIUMTLS 1.3 CompressedCertificate excessive memory allocationEPSS 0.5%CVE-2024-33617HIGHInsufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosureEPSS 0.5%CVE-2026-2673MEDIUMOpenSSL TLS 1.3 server may choose unexpected key agreement groupEPSS 0.5%CVE-2026-74877HIGHopenssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_keyEPSS 0.5%CVE-2026-8721CRITICALCrypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLsEPSS 0.4%CVE-2026-74893HIGHopenssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded SecretsEPSS 0.4%CVE-2026-74879HIGHopenssl_encrypt before 1.4.0 Information Disclosure via /ready endpointEPSS 0.4%CVE-2026-54872LOWTiming Side-Channel in Scalar Multiplication for Non-NIST EC CurvesEPSS 0.4%CVE-2026-81705HIGHopenssl-encrypt before 1.4.9 Password Cleartext Leak via DebugEPSS 0.4%CVE-2026-45446MEDIUMIncorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modesEPSS 0.4%CVE-2026-74884HIGHopenssl_encrypt before 1.4.0 Path Traversal via plugin_idEPSS 0.4%CVE-2026-74874HIGHopenssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel SelectionEPSS 0.4%CVE-2026-81719CRITICALopenssl_encrypt before 1.4.9 Remote Code Execution via PluginEPSS 0.4%CVE-2024-28885HIGHObservable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network aEPSS 0.4%CVE-2026-81698CRITICALopenssl_encrypt before 1.4.9 Shell Injection via info commandEPSS 0.4%CVE-2026-81701CRITICALopenssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned pluginEPSS 0.4%CVE-2024-3296MEDIUMRust-openssl: timing based side-channel can lead to a bleichenbacher style attackEPSS 0.4%CVE-2026-74901CRITICALopenssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR FallbackEPSS 0.4%CVE-2026-77696LOWTiming Side-Channel in SM2 Signature GenerationEPSS 0.4%