Security News

주요 제품 취약점 (8건)

"OpenSSL" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
OpenSSL OpenSSL OpenSSL
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attac…
CVE-2014-0160 7.5 CWE-125 KEV 2022-05-04
OpenSSL
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is …
CVE-2026-15981 9.8 CWE-287 —
OpenSSL
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
CVE-2026-93302 8.2 CWE-295 —
OpenSSL
Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges a…
CVE-2024-0394 7.8 CWE-862 —
OpenSSL
Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while anothe…
CVE-2026-84783 7.5 CWE-416 —
OpenSSL
Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CR…
CVE-2026-28388 7.5 CWE-476 —
OpenSSL
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally t…
CVE-2022-0778 7.5 CWE-835 —
OpenSSL
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certi…
CVE-2026-73581 6.5 CWE-299 —