Exposición de OpenSSL
Web server extensions553
score de exposición
62.289
sitios usan
0
en explotación
43
críticos
CVEs
247 resultadosCVE-2026-72897HIGHOut-of-Bounds Access After SSL_set_SSL_CTX() During a HandshakeEPSS 0.4%CVE-2025-4575MEDIUMThe x509 application adds trusted use instead of rejected useEPSS 0.4%CVE-2026-34181HIGHPKCS#12 Files with PBMAC1 Are Accepted with Short HMAC KeysEPSS 0.4%CVE-2026-74881HIGHopenssl_encrypt before 1.4.0 CORS Misconfiguration via Wildcard OriginsEPSS 0.4%CVE-2026-41681HIGHrust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length checkEPSS 0.4%CVE-2026-81700CRITICALopenssl_encrypt before 1.4.9 GPG Signature Verification BypassEPSS 0.4%CVE-2026-74876CRITICALopenssl_encrypt before 1.4.0 Unverified Key Bundle EncryptionEPSS 0.3%CVE-2026-74889CRITICALopenssl_encrypt before 1.4.0 Weak Key Derivation via HKDFEPSS 0.3%CVE-2026-58102CRITICALCrypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_extsEPSS 0.3%CVE-2026-75805MEDIUMNULL Pointer Dereference in CMP Client Revocation Response HandlingEPSS 0.3%CVE-2026-35189MEDIUMExcessive Memory Allocation in Relative CRLDP ProcessingEPSS 0.3%CVE-2026-74873HIGHopenssl_encrypt before 1.4.0 Password Exposure via CLI ArgumentEPSS 0.3%CVE-2026-58101HIGHCrypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereferenceEPSS 0.3%CVE-2026-35188MEDIUMDouble-free When Checking OCSP Stapled ResponseEPSS 0.3%CVE-2026-74887MEDIUMopenssl_encrypt before 1.4.0 Insecure Random Import in PQC ModuleEPSS 0.3%CVE-2024-9355MEDIUMGolang-fips: golang fips zeroed bufferEPSS 0.3%CVE-2026-41677LOWrust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized lengthEPSS 0.3%CVE-2026-81687HIGHopenssl_encrypt before 1.4.9 Denial of Service via KDFEPSS 0.3%CVE-2026-84783HIGHUse-After-Free in X.509 Extension Cache Under Concurrent UseEPSS 0.3%CVE-2026-41676HIGHrust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1EPSS 0.3%