Skip to contentOpenssl vulnerabilities
Newest
- openssl, siemens simatic cn 4100, simatic cn 4100 firmware +2 moreOpenSSL TLS 1.3 server may choose unexpected key agreement groupCVE-2026-2673Fix available6.5 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() functionCVE-2026-22796Fix available5.3 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreMissing ASN1_TYPE validation in PKCS#12 parsingCVE-2026-22795Fix available5.5 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionCVE-2025-69421Public exploitFix available7.5 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreMissing ASN1_TYPE validation in TS_RESP_verify_response() functionCVE-2025-69420Public exploitFix available7.5 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversionCVE-2025-69419Public exploitFix available7.4 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreUnauthenticated/unencrypted trailing bytes with low-level OCB function callsCVE-2025-69418Fix available4.0 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreHeap out-of-bounds write in BIO_f_linebuffer on short writesCVE-2025-68160Fix available4.7 Medium
- opensslTLS 1.3 CompressedCertificate excessive memory allocationCVE-2025-66199Fix available5.9 Medium
- openssl'openssl dgst' one-shot codepath silently truncates inputs >16MBCVE-2025-15469Fix available5.5 Medium
- opensslNULL dereference in SSL_CIPHER_find() function on unknown cipher IDCVE-2025-15468Fix available5.9 Medium
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- opensslImproper validation of PBMAC1 parameters in PKCS#12 MAC verificationCVE-2025-11187Public exploitFix available6.1 Medium
- openssl, siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +27 more +29 moreOut-of-bounds read in HTTP client no_proxy handlingCVE-2025-9232Fix available5.9 Medium
- openssl, siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +20 more +22 moreTiming side-channel in SM2 algorithm on 64 bit ARMCVE-2025-9231Fix available5.9 Medium
- openssl, debian linux, siemens ruggedcom rst2428p +27 more +29 moreOut-of-bounds read & write in RFC 3211 KEK UnwrapCVE-2025-9230Fix available9.8 Critical
- opensslThe x509 application adds trusted use instead of rejected useCVE-2025-4575Fix available6.5 Medium
- debian linux, netapp 500f firmware, 8300 firmware +27 more +29 moreTiming side-channel in ECDSA signature computationCVE-2024-13176Public exploitFix available4.6 Medium
- debian linux, netapp 500f firmware, a250 firmware +30 more +32 moreLow-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143Fix availableEPSS 12.5%8.8 High
- openssl, netapp bootstrap os, brocade fabric operating system +9 more +11 moreRFC7250 handshakes with unauthenticated servers don't abort as expectedCVE-2024-12797Fix available7.4 High
- netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 morePossible denial of service in X.509 name checksCVE-2024-6119Fix availableEPSS 66.6%7.5 High
- openssl, debian linux, netapp 500f firmware +40 more +42 moreSSL_select_next_proto buffer overreadCVE-2024-5535Public exploitFix available9.1 Critical
- openssl, debian linux, netapp 500f firmware +32 more +34 moreUse After Free with SSL_free_buffersCVE-2024-4741Fix available9.8 Critical
- openssl, netapp 500f firmware, 8300 firmware +19 more +21 moreExcessive time spent checking DSA keys and parametersCVE-2024-4603Fix available5.3 Medium
- openssl, debian linux, netapp 500f firmware +79 more +81 moreUnbounded memory growth with session handling in TLSv1.3CVE-2024-2511Fix availableEPSS 59.3%5.9 Medium
- openssl, siemens sidis prime, simatic s7-1500 tm mfp - gnu/linux subsystem +1 more +3 morePKCS12 Decoding crashesCVE-2024-0727Fix available5.5 Medium
- openssl, netapp 500f firmware, 8300 firmware +31 more +33 moreExcessive time spent checking invalid RSA public keysCVE-2023-6237Fix available5.9 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem, sinec nms +2 morePOLY1305 MAC implementation corrupts vector registers on PowerPCCVE-2023-6129Fix available6.5 Medium
- openssl, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +7 more +9 moreExcessive time spent in DH check / generation with large Q parameter valueCVE-2023-5678Fix available5.3 Medium
- openssl, debian linux, netapp h300s firmware +9 more +11 moreIncorrect cipher key & IV length processingCVE-2023-5363Fix available7.5 High
- openssl, siemens sidis prime, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morePOLY1305 MAC implementation corrupts XMM registers on WindowsCVE-2023-4807Fix available7.8 High
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreExcessive time spent checking DH q parameter valueCVE-2023-3817Fix available5.3 Medium
- openssl, siemens sidis prime, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreExcessive time spent checking DH keys and parametersCVE-2023-3446Fix available5.3 Medium
- openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 moreAES-SIV implementation ignores empty associated data entriesCVE-2023-2975Fix available5.3 Medium
- openssl`openssl` `X509VerifyParamRef::set_host` buffer over-readCVE-2023-53159Fix available4.5 Medium
- openssl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morePossible DoS translating ASN.1 object identifiersCVE-2023-2650Fix availableEPSS 75.4%6.5 Medium
- opensslInput buffer over-read in AES-XTS implementation on 64 bit ARMCVE-2023-1255Fix available5.9 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreCertificate policy check not enabledCVE-2023-0466Fix available5.3 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreInvalid certificate policies in leaf certificates are silently ignoredCVE-2023-0465Fix available5.3 Medium
- openssl, siemens bfcclient, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreExcessive Resource Usage Verifying X.509 Policy ConstraintsCVE-2023-0464Public exploitFix available7.5 High
- openssl, stormshield management center +1 moreNULL dereference during PKCS7 data verificationCVE-2023-0401Fix available7.5 High
- openssl, siemens bfcclient, ruggedcom ape1808 +9 more +11 moreX.400 address type confusion in X.509 GeneralNameCVE-2023-0286Public exploitFix availableEPSS 68.4%7.4 High
- opensslNULL dereference validating DSA public keyCVE-2023-0217Fix available7.5 High
- openssl, stormshield management center +1 moreInvalid pointer dereference in d2i_PKCS7 functionsCVE-2023-0216Fix available7.5 High
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 moreUse-after-free following BIO_new_NDEFCVE-2023-0215Fix available7.5 High
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 moreDouble free after calling PEM_read_bio_exCVE-2022-4450Fix availableEPSS 28.6%7.5 High
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +8 more +10 moreTiming Oracle in RSA DecryptionCVE-2022-4304Public exploitFix availableEPSS 23.5%5.9 Medium
- opensslX.509 Name Constraints Read Buffer OverflowCVE-2022-4203Fix available4.9 Medium
- netapp altavault ost plug-in, fas\/aff baseboard management controller, hci baseboard management controller +4 more +6 moreX.509 Policy Constraints Double LockingCVE-2022-3996Fix available7.5 High
- fedoraproject fedora, nodejs node.js, openssl +9 more +11 moreX.509 Email Address Variable Length Buffer OverflowCVE-2022-3786Public exploitFix availableEPSS 92.5%7.5 High
- Show moreLoading…