Mozilla Nss vulnerabilities

• mozilla nss The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting... CVE-2023-4421 Fix available 6.5 MediumOctober 18, 2023
• mozilla nss, network security services +1 more A vulnerability found in nss. By this security vulnerability, nss client auth crash without a... CVE-2022-3479 Fix available 7.5 HighOctober 14, 2022
• mozilla nss, nss esr, netapp cloud backup +7 more +9 more NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap... CVE-2021-43527 Fix available EPSS 17.6% 9.8 CriticalDecember 1, 2021
• mozilla nss, fedoraproject fedora, mozilla network security services +4 more +6 more A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw... CVE-2020-25648 Fix available 7.5 HighOctober 20, 2020
• mozilla nss A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55.... CVE-2020-12403 Fix available 9.1 CriticalAugust 18, 2020
• mozilla network security services, nss, netapp hci compute node +11 more +13 more In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing... CVE-2019-17006 Fix available 9.8 CriticalDecember 30, 2019
• mozilla network security services, nss, siemens ruggedcom rox mx5000 firmware +7 more +9 more In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... CVE-2019-17007 Fix available 7.5 HighNovember 29, 2019
• mozilla network security services, nss, siemens ruggedcom rox mx5000 firmware +7 more +9 more In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can... CVE-2018-18508 Fix available 6.5 MediumDecember 31, 2018
• mozilla network security services (nss), network security services +1 more A cached side channel attack during handshakes using RSA encryption could allow for the... CVE-2018-12404 Fix available EPSS 44.2% 5.9 MediumDecember 12, 2018
• mozilla network security services (nss), network security services +1 more When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random... CVE-2018-12384 Fix available 5.9 MediumSeptember 4, 2018
• mozilla nss, network security services +1 more Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty... CVE-2017-7502 Fix available 7.5 HighMay 30, 2017
• [unknown] nss, mozilla network security services +1 more nss before version 3.30 is vulnerable to a remote denial of service during the session handshake... CVE-2016-9574 Fix available 5.9 MediumMay 4, 2017
• mozilla nss, network security services, redhat enterprise linux desktop +5 more +7 more It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to... CVE-2016-8635 Fix available 5.3 MediumNovember 17, 2016
• mozilla network security services, avaya aura application enablement services, aura application server 5300 +25 more +27 more Null pointer dereference vulnerability exists in K11_SignWithSymKey /... CVE-2016-5285 Fix available 7.5 HighNovember 16, 2016
• mozilla firefox, nss, opensuse leap +1 more +3 more The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3... CVE-2016-1938 Fix available 6.5 MediumJanuary 26, 2016
• apache http server, gnu gnutls, mozilla nss +5 more +7 more Apache Tomcat affected by vulnerability in TLS and SSL protocol CVE-2009-3555 Public exploitFix available EPSS 87.3% 5.8 MediumNovember 9, 2009