Exposure of OpenSSL

Web server extensions
169
exposure score
71,969
sites use
0
exploited
8
critical

CVEs

152 results
CVE-2026-31789MEDIUMHeap Buffer Overflow in Hexadecimal ConversionEPSS 0.2%CVE-2026-42327HIGHrust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLsEPSS 0.2%CVE-2026-45446MEDIUMIncorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modesEPSS 0.2%CVE-2026-34181HIGHPKCS#12 Files with PBMAC1 Are Accepted with Short HMAC KeysEPSS 0.2%CVE-2026-42771MEDIUMPossible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()EPSS 0.2%CVE-2025-35471HIGHconda-forge openssl-feedstock writable OPENSSLDIREPSS 0.2%CVE-2025-15469MEDIUM'openssl dgst' one-shot codepath silently truncates inputs >16MBEPSS 0.2%CVE-2026-44662MEDIUMrust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-paddingEPSS 0.2%CVE-2025-46551MEDIUMJRuby-OpenSSL has hostname verification disabled by defaultEPSS 0.2%CVE-2025-68160MEDIUMHeap out-of-bounds write in BIO_f_linebuffer on short writesEPSS 0.2%CVE-2026-22795MEDIUMMissing ASN1_TYPE validation in PKCS#12 parsingEPSS 0.1%CVE-2025-69418MEDIUMUnauthenticated/unencrypted trailing bytes with low-level OCB function callsEPSS 0.1%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →