Skip to content
Noroxi

OpenSSL records

331 published records for vendor OpenSSL. 1 of them have been exploited in the wild (listed in CISA KEV) and 10 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
1 · 0.3%
Weaponized
10 · 3%
Pre-auth RCE
19
With a fix record
93.1%
Median publish → KEV
2949 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

331 records
  • CVE-2014-0160
    90Now

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    openssl · opensslApr 7, 2014

  • CVE-2021-3711
    65This week

    SM2 Decryption Buffer Overflow

    CriticalCVSS 9.8Proof of conceptEPSS 87%

    openssl · opensslAug 24, 2021

  • CVE-2003-0545
    65This week

    Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code

    CriticalCVSS 9.8No exploitEPSS 87%

    openssl · opensslNov 17, 2003

  • CVE-2009-3555
    65This week

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in th

    CriticalCVSS 9.8Proof of conceptEPSS 87%

    apache · http serverNov 9, 2009

  • CVE-2016-2108
    62This week

    The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denia

    CriticalCVSS 9.8No exploitEPSS 77%

    openssl · opensslMay 4, 2016

  • CVE-2014-3566
    60This week

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man

    LowCVSS 3.4WeaponizedEPSS 99%

    openssl · opensslOct 14, 2014

  • CVE-2015-4000
    60This week

    The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_E

    LowCVSS 3.7WeaponizedEPSS 99%

    openssl · opensslMay 20, 2015

  • CVE-2014-0224
    60This week

    OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, whi

    HighCVSS 7.4WeaponizedEPSS 95%

    openssl · opensslJun 5, 2014

  • CVE-2016-0800
    60This week

    The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify me

    MediumCVSS 5.9WeaponizedEPSS 82%

    openssl · opensslMar 1, 2016

  • CVE-2016-6309
    60This week

    statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a den

    CriticalCVSS 9.8No exploitEPSS 70%

    openssl · opensslSep 26, 2016

  • CVE-2015-1793
    60This week

    The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic

    MediumCVSS 6.5WeaponizedEPSS 58%

    openssl · opensslJul 9, 2015

  • CVE-2022-3358
    60This week

    Using a Custom Cipher with NID_undef may lead to NULL encryption

    HighCVSS 7.5WeaponizedEPSS 4%

    openssl · opensslOct 11, 2022

  • CVE-2022-2068
    58Plan

    The c_rehash script allows command injection

    HighCVSS 7.3No exploitEPSS 96%

    openssl · opensslJun 21, 2022

  • CVE-2016-2183
    58Plan

    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of appr

    HighCVSS 7.5Proof of conceptEPSS 94%

    redhat · jboss enterprise application platformAug 31, 2016

  • CVE-2022-3786
    58Plan

    X.509 Email Address Variable Length Buffer Overflow

    HighCVSS 7.5Proof of conceptEPSS 92%

    openssl · opensslNov 1, 2022

  • CVE-2014-0195
    57Plan

    The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properl

    MediumCVSS 6.8WeaponizedEPSS 99%

    openssl · opensslJun 5, 2014

  • CVE-2022-3602
    57Plan

    X.509 Email Address 4-byte Buffer Overflow

    HighCVSS 7.5Proof of conceptEPSS 90%

    openssl · opensslNov 1, 2022

  • CVE-2002-0656
    57Plan

    Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a larg

    HighCVSS 7.5Proof of conceptEPSS 89%

    openssl · opensslAug 12, 2002

  • CVE-2025-15467
    57Plan

    Stack buffer overflow in CMS (Auth)EnvelopedData parsing

    HighCVSS 8.8Proof of conceptEPSS 74%

    openssl · opensslJan 27, 2026

  • CVE-2016-2842
    55Plan

    The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memor

    CriticalCVSS 9.8No exploitEPSS 53%

    openssl · opensslMar 3, 2016

  • CVE-2006-3738
    55Plan

    Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspeci

    CriticalCVSS 10.0No exploitEPSS 49%

    openssl · opensslSep 28, 2006

  • CVE-2022-1292
    54Plan

    The c_rehash script allows command injection

    HighCVSS 7.3Proof of conceptEPSS 82%

    siemens · brownfield connectivity gatewayMay 3, 2022

  • CVE-2015-1789
    53Plan

    The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1

    HighCVSS 7.5No exploitEPSS 75%

    openssl · opensslJun 12, 2015

  • CVE-2022-2274
    53Plan

    RSA implementation bug in AVX512IFMA instructions

    CriticalCVSS 9.8Proof of conceptEPSS 48%

    openssl · opensslJul 1, 2022

  • CVE-2014-3512
    52Plan

    Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a

    HighCVSS 7.5No exploitEPSS 74%

    openssl · opensslAug 13, 2014