◇Scantide
SCANTIDE TRIAGE · PRIORITY INTELLIGENCE

Threat Convergence

Focus on the CVEs with the strongest combination of signals: CISA KEV, exploit references and Critical severity. Ranked by 3, 2, then 1 matching signals across your selected time window.

Investigate anythingVendor, software, device, CVE or threat actor
Featured example OpenSSL 3.1 · Software investigation · rotates on a new homepage visit
Scantide Triage
—CVE records—CVEs with NVD criteria—Active intelligence feeds
Software search · “OpenSSL”

openssl 3.1

VERSION UNDER INVESTIGATION3.1CVE analysis centered on this release

Matching NVD version criteria are shown first; full configuration applicability is not asserted.

Vendors: not yet verified

Match: Exact product · 148 indexed CVEs · 34 identities found for this search

Switch identity (33 others) →
JSON 1439.2 ms ⚑ 9 caveats
0Known exploited
(CISA KEV) 0Public exploit
references 0High or critical
CVSS 0Advisory-linked
CVEs
Critical 0 High 0 Medium 0 Low 0 Unscored 0 · 0 CVEs enriched of 148

How it connects

Click any box to explore the associated evidence or switch identity. Lifecycle and later-release details appear below the CVEs.
RELATED IDENTITIES · verified vendor labels / indexed correlationsEXPOSURE · co-listed in NVD criteriaSHARES CVEsopenssl141 shared · 141 CVEs · opensslSHARES CVEsopenssl4 shared · 4 CVEs · openssl software …SHARES CVEsopenssl1 shared · 1 CVEs · redhatSHARES CVEsopenssl1 shared · 1 CVEs · sfacklerSHARES CVEsopenssl1 shared · 1 CVEs · the openssl proje…+ 28 more related identities →SELECTED SOFTWARE VERSIONopenssl 3.10 matching version criteriaNVD candidate matches, not verified exposure
Vendor identity Shares CVEs Name match only NVD co-listing (scope: this page) Associations, not proven dependencies or installed exposure.

Associated vulnerabilities

Version 3.1 · matching CPE criteria · 0 match · Threat Convergence · RCE-refined · click a row for affected products and evidence
Combine threat signalsOnly evidence-backed classifications; no selection means all CVEs.
Clear

No CVEs match this filter. That does not establish the absence of vulnerabilities.

Page 1 of 1

Version intelligence · 3.1

NVD CPE criteria plus canonical catalog version assertions; full configuration applicability is not evaluated
0 CVEs with matching source-version criteria0 CVEs listing later-version criteria0 outside compared criteria0 unresolved (excluded from confirmed range matches)

A matching CPE criterion is not proof of vulnerability: AND/OR configurations, negation, environment and model identity still require validation. Missing matches do not establish safety.

Lifecycle intelligence: no matching local record resolved for this software. This does not establish that the release is supported or unsupported. Backend lifecycle alias/product index may need verification.

What else these CVEs list as affected

0 of 148 CVEs examined · partial

Software 0

products co-listed in NVD criteria

None in examined scope.

Operating systems 0

products co-listed in NVD criteria

None in examined scope.

Firmware 0

products co-listed in NVD criteria

None in examined scope.

Hardware 0

products co-listed in NVD criteria

None in examined scope.

NVD co-listing shows products appearing in the same vulnerability configurations. It does not prove that openssl is embedded, that a dependency exists, or that an installed release is vulnerable.

Advisories & campaigns

Page-specific advisories; campaign graph restricted to the matching-version CVE set. Actor co-mentions are not confirmed exploitation.

Campaign intelligence

0 CVEs checked in the selected version’s matched criteria. Source co-mention is not confirmed actor exploitation.

Published graph unavailable · 0 CVEs checked · 0 evidence edges

No published campaign generation found.

Associations are source-backed co-mentions, not attribution or proof of exploitation.

CVEs referenced per source family (whole enriched set)

Exploit references0
Security & vendor advisories0
GitHub / OSV0
Operational intel (IC3, Europol, CrowdSec)0

Source records by feed 0

No detailed source records resolved for this page.

All identities for “OpenSSL”

Same-name products may belong to different vendors. Purple = shares CVEs with the selected product. Additional family candidates are separately identified.
openssl · selectedVendor unspecified · 148 CVEsExact product opensslopenssl · 141 CVEsExact product · 141 shared CVEs opensslopenssl software foundation · 4 CVEsExact product · 4 shared CVEs opensslredhat · 1 CVEsExact product · 1 shared CVEs opensslsfackler · 1 CVEsExact product · 1 shared CVEs opensslthe openssl project · 1 CVEsExact product · 1 shared CVEs openssl extension of ruby git trunkopenssl · 1 CVEsVendor product openssl encryptVendor unspecified · 66 CVEsName-related product (not verified same family) openssl encryptjahlives · 66 CVEsName-related product (not verified same family) rust-opensslVendor unspecified · 11 CVEsName-related product rust-opensslrust-openssl · 8 CVEsName-related product crypt openssl pkcs12Vendor unspecified · 4 CVEsName-related product crypt openssl pkcs12jonasbn · 4 CVEsName-related product intel r qat engine for openssl softwareVendor unspecified · 3 CVEsName-related product systems insight manager using opensslVendor unspecified · 3 CVEsName-related product systems insight manager using opensslhewlett packard enterprise · 3 CVEsName-related product crypt openssl x509Vendor unspecified · 2 CVEsName-related product crypt openssl x509jonasbn · 2 CVEsName-related product github.com golang-fips opensslVendor unspecified · 1 CVEsName-related product intel r qat engine for opensslVendor unspecified · 1 CVEsName-related product jruby-opensslVendor unspecified · 1 CVEsName-related product jruby-openssljruby · 1 CVEsName-related product node-openssl node moduleVendor unspecified · 1 CVEsName-related product node-openssl node modulehackerone · 1 CVEsName-related product openssl extension of ruby git trunkVendor unspecified · 1 CVEsName-related product (not verified same family) openssl-feedstockVendor unspecified · 1 CVEsName-related product (not verified same family) openssl-feedstockconda-forge · 1 CVEsName-related product (not verified same family) openssl.js node moduleVendor unspecified · 1 CVEsName-related product openssl.js node modulehackerone · 1 CVEsName-related product perl-crypt-openssl-rsaVendor unspecified · 1 CVEsName-related product · 1 shared CVEs rust-opensslsfackler · 1 CVEsName-related product wildfly-opensslVendor unspecified · 1 CVEsName-related product pyopensslVendor unspecified · 2 CVEsPartial name match pyopensslpyca · 2 CVEsPartial name match

Default-credential intelligence

Independent security configuration evidence · not vulnerability applicability · identity index not built or unavailable

Look for documented default usernames, blank passwords, setup-required credentials and device-specific credential practices associated with this vendor or product. The on-demand lookup displays explicitly disclosed default credentials with provenance; unreviewed and withheld secrets stay hidden.

Full credential catalog ↗
Evidence coverage & limitations 9 caveats · 0 sources contributing
Requested version 3.1 is checked against indexed NVD CPE criteria and canonical catalog version assertions for the selected product. Complete AND/OR configuration and installed-device applicability are not evaluated.
Redis enrichment unavailable. Product discovery is shown, but intelligence coverage is incomplete.
CVE list represents a bounded set returned by the search function, not an exhaustive lifetime total.
Version-specific criteria could not be loaded. No vulnerabilities have been confirmed for the requested version.
Campaign graph lookup incomplete or unavailable; absence of actor associations is not proof of none.
Full-set signal index coverage incomplete; do not interpret zero counts as absence of evidence.
Named campaigns and threat actors are not verified by these indexes. Advisory references are not campaign evidence.
Redis intelligence generation metadata could not be read; absence of KEV or exploit evidence is not reliable.
KEV generation unavailable: KEV matches cannot be assessed reliably.

Source index hits (enriched set)

What this view can and cannot establish

Advisories & campaignsResolved source records with IDs, publisher, dates and links. Campaign names come from a precooked cache and are not attribution.
RelationshipsSearch identities and CPE co-listings are correlations. Embedding, forks, dependencies and distribution need explicit source evidence and are never inferred.
Versions & fixesNVD match ranges where available. Simple numeric version-range comparisons are shown where indexed. Fixed releases and full AND/OR applicability remain unevaluated.
Exposure scope0 / 148 CVEs checked (page). 1,000-CVE enrichment cap, 256 criteria per CVE.
LifecycleMatched against Scantide local lifecycle alias/product records. Release-specific status only shown when the record explicitly names that release.
Threat techniquesCWE shown where indexed. ATT&CK / CAPEC mapping needs validated edges.
AbsenceEmpty indexes never imply absence. KEV “no” means no record in the active index.
Discovery is bounded to protect latency; counts describe the returned index window. Risk ordering is heuristic (KEV → exploit → EPSS → CVSS) and does not replace CVSS or EPSS. · Open full Analyzer