Vulnerabilities
Last updated 56 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
openssl
|
rust-openssl has incorrect bounds assertion in aes key wrap | High Risk 8.0 | 6 months ago | 8 hours ago |
|
openssl
|
Out-of-bounds write in `aes::unwrap_key` | Unknown | 6 months ago | 8 hours ago |
|
openssl
|
ssl::select_next_proto use after free | Unknown | 1 year ago | 28 days ago |
microsoft.native.quic.msquic.openssl
|
MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL | Critical 9.5 | 1 month ago | 1 month ago |
github.com/golang-fips/openssl
|
Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability | Medium Risk 6.5 | 2 years ago | 1 month ago |
openssl-encrypt
|
openssl-encrypt has CORS wildcard with allow_credentials=True in standalone servers | Medium Risk 6.0 | 7 months ago | 1 month ago |
|
openssl-encrypt
|
No summary available | Medium Risk 5.5 | 2 months ago | 1 month ago |
|
openssl-encrypt
|
No summary available | Critical 9.3 | 2 months ago | 1 month ago |
|
openssl-encrypt
|
No summary available | Medium Risk 5.3 | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl-encrypt
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
openssl
|
rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs | High Risk 8.0 | 6 months ago | 2 months ago |
|
openssl
|
rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding | Medium Risk 6.0 | 6 months ago | 2 months ago |
|
openssl
|
rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers | Medium Risk 6.0 | 5 months ago | 2 months ago |
|
openssl
|
rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer | High Risk 8.0 | 6 months ago | 2 months ago |
|
openssl
|
rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 | High Risk 8.0 | 6 months ago | 2 months ago |
|
openssl
|
rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check | High Risk 8.0 | 6 months ago | 2 months ago |
|
pyopenssl
|
pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback | Low Risk 3.0 | 7 months ago | 2 months ago |
|
openssl
|
rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch` | Medium Risk 6.0 | 1 year ago | 2 months ago |
|
openssl
|
rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length | Low Risk 3.0 | 6 months ago | 2 months ago |
|
pyopenssl
|
pyOpenSSL DTLS cookie callback buffer overflow | High Risk 8.0 | 7 months ago | 2 months ago |
rubygems:jruby-openssl
|
JRuby-OpenSSL has hostname verification disabled by default | Medium Risk 6.0 | 1 year ago | 2 months ago |
jruby-openssl
|
JRuby-OpenSSL has hostname verification disabled by default | Medium Risk 6.0 | 1 year ago | 2 months ago |
|
openssl
|
openssl's `MemBio::get_buf` has undefined behavior with empty buffers | Medium Risk 6.5 | 2 years ago | 2 months ago |
|
openssl
|
`openssl` `X509StoreRef::objects` is unsound | Medium Risk 6.0 | 2 years ago | 2 months ago |
|
openssl-src
|
openssl-src subject to Timing Oracle in RSA Decryption | Medium Risk 5.9 | 3 years ago | 2 months ago |
|
openssl
|
rust-openssl ssl::select_next_proto use after free | Medium Risk 6.0 | 1 year ago | 2 months ago |
|
openssl
|
`openssl` `X509VerifyParamRef::set_host` buffer over-read | Medium Risk 4.5 | 3 years ago | 2 months ago |
|
openssl-src
|
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF` | High Risk 7.5 | 3 years ago | 2 months ago |
|
openssl-src
|
openssl-src contains Double free after calling `PEM_read_bio_ex` | High Risk 7.5 | 3 years ago | 2 months ago |
|
openssl-src
|
openssl-src contains `NULL` dereference during PKCS7 data verification | High Risk 7.5 | 3 years ago | 2 months ago |
|
openssl-src
|
openssl-src subject to NULL dereference validating DSA public key | High Risk 7.5 | 3 years ago | 2 months ago |
|
openssl-src
|
openssl-src contains Read Buffer Overflow in X.509 Name Constraint | Critical 9.1 | 3 years ago | 2 months ago |
|
openssl-src
|
Vulnerable OpenSSL included in cryptography wheels | High Risk 7.4 | 3 years ago | 2 months ago |
|
openssl-src
|
openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions | High Risk 7.5 | 3 years ago | 2 months ago |
|
openssl-src
|
Denial of service by double-checked locking in openssl-src | High Risk 7.5 | 3 years ago | 2 months ago |
|
openssl-src
|
X.509 Email Address Variable Length Buffer Overflow | High Risk 7.5 | 4 years ago | 2 months ago |
|
openssl-src
|
X.509 Email Address 4-byte Buffer Overflow | Critical 9.8 | 4 years ago | 2 months ago |
|
openssl-src
|
Using a Custom Cipher with `NID_undef` may lead to NULL encryption | High Risk 7.5 | 4 years ago | 2 months ago |
|
openssl-src
|
AES OCB fails to encrypt some bytes | High Risk 7.5 | 4 years ago | 2 months ago |
|
openssl-src
|
Incorrect MAC key used in the RC4-MD5 ciphersuite | Medium Risk 5.9 | 4 years ago | 2 months ago |
|
openssl-src
|
`OCSP_basic_verify` may incorrectly verify the response signing certificate | Medium Risk 5.3 | 4 years ago | 2 months ago |
|
openssl-src
|
Resource leakage when decoding certificates and keys | High Risk 7.5 | 4 years ago | 2 months ago |
Page 1