Sploitus

276 exploited vulnerabilities in Openssl

Showing 1–50 of 276, highest-scoring first

Vendors
Ibm, Linux Mint, Openssl, Red Os, Canonical, Freebsd
With known exploits
276
Affected Openssl versions
< 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1, 3.0.7, 1.0.2zf, 1.1.1p, 3.0.4, 1.1.1l, 1.0.1, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e, 1.0.1f, 1.0.1g, 1.0.1h, 1.0.1i, 1.0.1j, 1.0.1k, 1.0.1l, 1.0.1m, 1.0.1n, 1.0.1o, 1.0.1p, 1.0.1q, 1.0.1r, 1.0.2, 1.0.2a, 1.0.2b, 1.0.2c, 1.0.2d, 1.0.2e, 1.0.2f, 1.0.0b, 0.9.1c, 0.9.2b, 0.9.3, 0.9.3a, 0.9.4, 0.9.5, 0.9.5a, 0.9.6, 0.9.6a, 0.9.6b, 0.9.6c, 0.9.6d, 0.9.6e, 0.9.6f, 0.9.6g, 0.9.6h, 0.9.6i, 0.9.6j, 0.9.6k, 0.9.6l, 0.9.6m, 0.9.7, 0.9.7a, 0.9.7b, 0.9.7c, 0.9.7d, 0.9.7e, 0.9.7f, 0.9.7g, 0.9.7h, 0.9.7i, 0.9.7j, 0.9.7k, 0.9.7l, 0.9.7m, 0.9.8, 0.9.8a, 0.9.8b, 0.9.8c, 1.0.0a, 0.9.8f, 0.9.8g, 0.9.8h, 0.9.8i, 0.9.8j, 0.9.8k, 0.9.8l, 0.9.8m, 0.9.8d, 0.9.8e, 1.0
Affected Vasion Virtual Appliance Application versions
< 20.0.2614
Affected Vasion Virtual Appliance Host versions
< 22.0.1002
Affected Santesoft Sante Pacs Server versions
= 4.1.0
Affected Exim versions
< 4.94.2
Affected Hp Icewall Mcrp versions
= 3.0
Affected Hp Icewall Sso versions
= 10.0
Affected Hp Icewall Sso Agent Option versions
= 10.0

Vulnerabilities with exploits

Highest CVSS first — 22 of these already have exploit code on Sploitus

CVE-2026-31789
CVSS 10.0 CRITICAL 2026-04-07
CVE-2025-15467 6 exploits
CVSS 10.0 HIGH 2025-01-01FIX AVAILABLE
Exploit for Out-of-bounds Write in OpensslExploit for Out-of-bounds Write in Openssl
CVE-2025-34203
CVSS 10.0 CRITICAL 2025-09-19FIX AVAILABLE
CVE-2025-2263 1 exploit
CVSS 10.0 CRITICAL 2025-03-13
Exploit for Improper Restriction of XML External Entity Reference in Ivanti Endpoint_Manager
CVE-2023-49210
CVSS 10.0 CRITICAL 2023-11-23
CVE-2022-3602 6 exploits
CVSS 10.0 HIGH 2022-10-28FIX AVAILABLE
Exploit for Expression Language Injection in Atlassian Confluence_Data_CenterExploit for Out-of-bounds Write in Openssl
CVE-2022-2068 1 exploit
CVSS 10.0 CRITICAL 2022-06-21FIX AVAILABLE
IBM Security Verify Access 32 Vulnerabilities
CVE-2022-2274 2 exploits
CVSS 10.0 CRITICAL 2022-07-01FIX AVAILABLE
Exploit for Out-of-bounds Write in OpensslExploit for Out-of-bounds Write in Openssl
CVE-2021-3711 1 exploit
CVSS 10.0 CRITICAL 2021-08-24FIX AVAILABLE
Exploit for Classic Buffer Overflow in Openssl
CVE-2020-28018 3 exploits
CVSS 10.0 CRITICAL 2018-03-12FIX AVAILABLE
📄 Qualys Security Advisory - Exim 21Nails AdvisoryExim 4 远程代码执行漏洞（CVE-2020-28018）
CVE-2018-16395
CVSS 10.0 CRITICAL 2018-10-17FIX AVAILABLE
CVE-2016-2177 2 exploits
CVSS 10.0 CRITICAL 2016-06-19FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middlearch-audit - An utility like pkg-audit for Arch Linux
CVE-2016-2108 1 exploit
CVSS 10.0 CRITICAL 2016-05-03FIX AVAILABLE
OpenSSL Memory corruption in the ASN.1 encoder (CVE-2016-2108)
CVE-2016-2842
CVSS 10.0 CRITICAL 2016-03-01FIX AVAILABLE
CVE-2016-0799 1 exploit
CVSS 10.0 CRITICAL 2016-03-01FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
CVE-2016-0705 1 exploit
CVSS 10.0 CRITICAL 2016-02-22FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
CVE-2010-4252
CVSS 10.0 HIGH 2010-12-02FIX AVAILABLE
CVE-2010-2939 1 exploit
CVSS 10.0 HIGH 2010-08-17FIX AVAILABLE
OpenSSL - 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption
CVE-2010-0740 5 exploits
CVSS 10.0 HIGH 2010-03-26FIX AVAILABLE
OpenSSL - Remote DoSOpenSSL remote Denial of Service
CVE-2010-0433
CVSS 10.0 HIGH 2010-03-05FIX AVAILABLE
CVE-2009-4355
CVSS 10.0 HIGH 2010-01-14FIX AVAILABLE
CVE-2009-3245 1 exploit
CVSS 10.0 HIGH 2010-02-23FIX AVAILABLE
OpenSSL < 0.9.8l and previous versions Multiple Vulnerability
CVE-2010-4180
CVSS 10.0 HIGH 1970-01-01FIX AVAILABLE
CVE-2006-4343 10 exploits
CVSS 10.0 HIGH 2006-09-28FIX AVAILABLE
OpenSSL < 0.9.7l / 0.9.8d - SSLv2 Client Crash ExploitOpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service Vulnerability
CVE-2003-0543 1 exploit
CVSS 10.0 HIGH 2003-09-30
OpenSSL ASN.1 < 0.9.6j/0.9.7b - Brute Forcer for Parsing Bugs
CVE-2026-7531
CVSS 9.8 CRITICAL 2026-06-25FIX AVAILABLE
CVE-2026-33810
CVSS 9.8 CRITICAL 2026-04-07FIX AVAILABLE
CVE-2026-27459
CVSS 9.8 CRITICAL 2026-03-16FIX AVAILABLE
CVE-2025-34192
CVSS 9.8 CRITICAL 2025-09-19FIX AVAILABLE
CVE-2025-48057
CVSS 9.8 CRITICAL 2025-05-27FIX AVAILABLE
CVE-2022-1292 5 exploits
CVSS 9.8 CRITICAL 2022-04-02FIX AVAILABLE
Exploit for OS Command Injection in Siemens Brownfield_Connectivity_GatewayExploit for OS Command Injection in Siemens Brownfield_Connectivity_Gateway
CVE-2020-24714
CVSS 9.8 CRITICAL 2020-08-27FIX AVAILABLE
CVE-2020-13417
CVSS 9.8 CRITICAL 2020-05-22FIX AVAILABLE
CVE-2009-3555 15 exploits
CVSS 9.8 CRITICAL 1970-01-01FIX AVAILABLE
metasploitable-vulnerability-mapping-with-nmapExploit for Improper Certificate Validation in Apache Http_Server
CVE-2024-5535 1 exploit
CVSS 9.4 CRITICAL 2024-05-02
Exploit for CVE-2024-5535
CVE-2022-25218
CVSS 9.3 HIGH 2022-03-07FIX AVAILABLE
CVE-2026-34182
CVSS 9.1 CRITICAL 2026-06-09
CVE-2026-28386
CVSS 9.1 CRITICAL 2026-04-07
CVE-2023-53159
CVSS 9.1 CRITICAL 2023-06-20FIX AVAILABLE
CVE-2024-37404 1 exploit
CVSS 9.1 CRITICAL 2024-10-08FIX AVAILABLE
Ivanti Connect Secure Authenticated Remote Code Execution via OpenSSL CRLF Injection
CVE-2021-26530
CVSS 9.1 CRITICAL 2021-02-08
CVE-2022-3996
CVSS 8.7 HIGH 2022-12-13
CVE-2026-5501
CVSS 8.6 HIGH 2026-04-10FIX AVAILABLE
CVE-2023-46724
CVSS 8.6 HIGH 2023-11-01FIX AVAILABLE
CVE-2016-2176 1 exploit
CVSS 8.5 HIGH 2016-05-03FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
CVE-2023-24012 1 exploit
CVSS 8.2 HIGH 2025-01-09
Exploit for CVE-2023-24012
CVE-2023-24011
CVSS 8.2 HIGH 2025-01-09
CVE-2023-24010
CVSS 8.2 HIGH 2025-01-09
CVE-2026-7383
CVSS 8.1 HIGH 2026-06-09
CVE-2026-45447
CVSS 8.1 HIGH 2026-06-09FIX AVAILABLE