Exposición de OpenSSL

Web server extensions
553
score de exposición
62.289
sitios usan
0
en explotación
43
críticos

CVEs

247 resultados
CVE-2026-41898HIGHrust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peerEPSS 0.3%CVE-2026-74875CRITICALopenssl_encrypt before 1.4.0 Schema Validation BypassEPSS 0.3%CVE-2026-81688HIGHopenssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256EPSS 0.3%CVE-2026-74888HIGHopenssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key DerivationEPSS 0.3%CVE-2026-81704HIGHopenssl_encrypt before 1.4.9 Weak Key Derivation via D-BusEPSS 0.3%CVE-2026-81691HIGHopenssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLsEPSS 0.3%CVE-2026-81689HIGHopenssl_encrypt before 1.4.9 Weak Pepper Key DerivationEPSS 0.3%CVE-2026-74870HIGHopenssl_encrypt before 1.4.8 Hardware Pepper Information DisclosureEPSS 0.3%CVE-2026-81715HIGHopenssl_encrypt before 1.4.9 Credential Exposure via Debug OutputEPSS 0.3%CVE-2026-81716HIGHopenssl_encrypt before 1.4.9 Plugin Sandbox Path TraversalEPSS 0.3%CVE-2026-27448LOWpyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callbackEPSS 0.3%CVE-2026-75803CRITICALAEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()EPSS 0.3%CVE-2026-31789MEDIUMHeap Buffer Overflow in Hexadecimal ConversionEPSS 0.3%CVE-2026-41678HIGHrust-openssl: Incorrect bounds assertion in aes key wrapEPSS 0.3%CVE-2026-81694CRITICALopenssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb CommandEPSS 0.3%CVE-2026-81685CRITICALopenssl_encrypt before 1.4.9 Text Injection via Recovery Slot MetadataEPSS 0.3%CVE-2026-81695CRITICALopenssl_encrypt before 1.4.9 Terminal Injection via key_idEPSS 0.3%CVE-2026-81696CRITICALopenssl_encrypt before 1.4.9 Terminal Injection via info CommandEPSS 0.3%CVE-2025-35471HIGHconda-forge openssl-feedstock writable OPENSSLDIREPSS 0.2%CVE-2023-53159MEDIUMThe openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.EPSS 0.2%