Exposición de OpenSSL

Web server extensions
553
score de exposición
62.289
sitios usan
0
en explotación
43
críticos

CVEs

247 resultados
CVE-2026-74896CRITICALopenssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute TraversalEPSS 0.6%CVE-2026-74880CRITICALopenssl_encrypt before 1.4.0 Token Leakage via Query ParametersEPSS 0.6%CVE-2026-74900CRITICALopenssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation ModeEPSS 0.6%CVE-2026-42767MEDIUMNULL Pointer Dereference in CRMF EncryptedValue DecryptionEPSS 0.6%CVE-2026-42769MEDIUMTrust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdateEPSS 0.5%CVE-2026-75804MEDIUMQUIC Connection-Level Flow Control is Not Enforced for StreamsEPSS 0.5%CVE-2025-3416LOWRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`EPSS 0.5%CVE-2026-54876HIGHClient-Side Memory Leak in OCSP Response CheckingEPSS 0.5%CVE-2026-74891HIGHopenssl_encrypt before 1.4.0 Hardcoded Database CredentialsEPSS 0.5%CVE-2026-28386CRITICALOut-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 SupportEPSS 0.5%CVE-2024-31074HIGHObservable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via neEPSS 0.5%CVE-2024-2467MEDIUMPerl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)EPSS 0.5%CVE-2026-74892HIGHopenssl_encrypt before 1.4.0 Hardcoded Secret KeyEPSS 0.5%CVE-2026-42765HIGHNULL Dereference in Certificate Verification with OCSP CheckingEPSS 0.5%CVE-2026-81699HIGHopenssl_encrypt before 1.4.9 Denial of Service via unbounded KDF costEPSS 0.5%CVE-2026-42770LOWFFC-DH Peer Validation Uses Attacker-Supplied qEPSS 0.5%CVE-2026-42772MEDIUMPotential CPU DoS via O(n^2) Fragment Reassembly in QUICEPSS 0.5%CVE-2026-81693HIGHopenssl_encrypt before 1.4.9 Denial of Service via QR total fieldEPSS 0.5%CVE-2026-81692HIGHopenssl_encrypt before 1.4.9 Denial of Service via STREAMINFOEPSS 0.5%CVE-2026-54875LOWNon-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-VEPSS 0.5%