Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

SSL/TLS Library

OpenSSL

OpenSSL is a robust commercial-grade and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Official Site:

https://www.openssl.org/

Severity Summary:

Critical: 20 High: 87 Medium: 177 Low: 16
Reference
Title
Severity
CVE-2026-28386
OpenSSL Out-of-bounds Read Vulnerability
Critical
CVE-2022-2068
OpenSSL Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
Critical
CVE-2016-6303
OpenSSL Out-of-bounds Write Vulnerability
Critical
CVE-2016-0705
OpenSSL Other Vulnerability
Critical
CVE-2016-2177
OpenSSL Integer Overflow or Wraparound Vulnerability
Critical
CVE-2016-6309
OpenSSL Use After Free Vulnerability
Critical
CVE-2016-2108
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Critical
CVE-2026-34182
OpenSSL Improper Validation of Integrity Check Value Vulnerability
Critical
CVE-2016-2842
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Critical
CVE-2016-0799
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Critical
CVE-2022-2274
OpenSSL Out-of-bounds Write Vulnerability
Critical
CVE-2022-1292
OpenSSL Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
Critical
CVE-2021-3711
OpenSSL Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Vulnerability
Critical
CVE-2016-2182
OpenSSL Out-of-bounds Write Vulnerability
Critical
CVE-2011-4109
OpenSSL Resource Management Errors Vulnerability
Critical
CVE-2006-3738
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Critical
CVE-2007-4995
OpenSSL Numeric Errors Vulnerability
Critical
CVE-2009-3245
OpenSSL Improper Input Validation Vulnerability
Critical
CVE-2003-0545
OpenSSL Double Free Vulnerability
Critical
CVE-2026-31789
OpenSSL Out-of-bounds Write Vulnerability
Critical
CVE-2025-69420
OpenSSL Improper Check for Unusual or Exceptional Conditions Vulnerability
High
CVE-2026-28387
OpenSSL Use After Free Vulnerability
High
CVE-2025-69419
OpenSSL Out-of-bounds Write Vulnerability
High
CVE-2010-3864
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability
High
CVE-2015-3194
OpenSSL Other Vulnerability
High
CVE-2022-0778
OpenSSL Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
High
CVE-2015-3193
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2026-28388
OpenSSL NULL Pointer Dereference Vulnerability
High
CVE-2010-0742
OpenSSL Cryptographic Issues Vulnerability
High
CVE-2015-0292
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High