Opensips

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

1. A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c.CVE-2013-3722Opensips · 1.1% likely

   CWE-835

2. OpenSIPS has vulnerability in the codec_delete_XX() functionsCVE-2023-27601OpenSIPS · CVSS 7.5 · 1.0% likely

   CWE-20

3. OpenSIPS has vulnerability in the codec_delete_XX() functionsCVE-2023-27600OpenSIPS · CVSS 7.5 · 1.0% likely

   CWE-20

4. OpenSIPS has vulnerability in the parse_to_param() functionCVE-2023-27599OpenSIPS · CVSS 7.5 · 1.0% likely

   CWE-20

5. OpenSIPS has vulnerability in the parse_via() functionCVE-2023-27598OpenSIPS · CVSS 7.5 · 1.0% likely

   CWE-908

6. OpenSIPS has vulnerability in the Content-Length ParserCVE-2023-28097OpenSIPS · CVSS 7.5 · 1.0% likely

   CWE-190

7. OpenSIPS has vulnerability in the building the local negative repliesCVE-2023-28095OpenSIPS · CVSS 7.5 · 1.0% likely

   CWE-20

8. OpenSIPS has vulnerability in the ds_is_in_list() functionCVE-2023-28099OpenSIPS · CVSS 5.9 · 0.9% likely

   CWE-20

9. OpenSIPS has vulnerability in the Digest Authentication ParserCVE-2023-28098OpenSIPS · CVSS 5.9 · 0.9% likely

   CWE-20

10. OpenSIPS: Buffer Overflow in Base64 Encode TransformationCVE-2026-45100OpenSIPS · CVSS 9.1 · 0.8% likely

    CWE-120

11. OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name CopyCVE-2026-45538OpenSIPS · CVSS 9.8 · 0.8% likely

    CWE-121

12. OpenSIPS has memory leak in cJSON libCVE-2023-28096OpenSIPS · CVSS 4.5 · 0.8% likely

    CWE-401

13. OpenSIPS has vulnerability in the parse_uri() functionCVE-2023-27597OpenSIPS · CVSS 7.5 · 0.7% likely

    CWE-20

14. OpenSIPS has vulnerability in the codec_delete_XX() functionsCVE-2023-27596OpenSIPS · CVSS 7.5 · 0.7% likely

    CWE-770

15. OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloningCVE-2026-46334OpenSIPS · CVSS 8.7 · 0.7% likely

    CWE-476

16. OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type stateCVE-2026-45084OpenSIPS · CVSS 8.7 · 0.7% likely

    CWE-476

17. OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URICVE-2026-45809OpenSIPS · CVSS 8.7 · 0.6% likely

    CWE-121

18. OpenSIPS: Global Buffer Overflow in construct_uriCVE-2026-45537OpenSIPS · CVSS 9.1 · 0.6% likely

    CWE-120

19. OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer OverflowCVE-2026-45103OpenSIPS · CVSS 7.5 · 0.6% likely

    CWE-190

20. OpenSIPS: OOB Read in Multipart Body Boundary ParsingCVE-2026-45705OpenSIPS · CVSS 5.3 · 0.5% likely

    CWE-125

21. OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication BypassCVE-2026-25554OpenSIPS · CVSS 6.5 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.