Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla network security services - vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2014-1492
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) prior to 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the...
Mozilla Network Security Services 3.15.3.1Mozilla Network Security Services 3.12Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.4Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.3Mozilla Network Security Services 3.6Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.7Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.11.5Mozilla Network Security Services 3.12.3.1Mozilla Network Security Services 3.9Mozilla Network Security Services 3.12.3.2Mozilla Network Security Services 3.14.1Mozilla Network Security Services 3.14.2Mozilla Network Security Services 3.15.3Mozilla Network Security Services 3.2Mozilla Network Security Services 3.4.2
383
VMScore
CVE-2011-5094
Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote malicious users to cause a denial of servic...
Mozilla Network Security Services 3.11.2Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.2Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.7.7Mozilla Network Security Services 3.7.5Mozilla Network Security Services 3.7.1Mozilla Network Security Services 3.6Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.9Mozilla Network Security Services 3.4Mozilla Network Security Services 3.8Mozilla Network Security Services 3.4.1Mozilla Network Security Services 3.11.5Mozilla Network Security Services 3.7Mozilla Network Security Services 3.7.2Mozilla Network Security Services 3.3Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.3.2Mozilla Network Security Services 3.5Mozilla Network Security Services 3.11.3
445
VMScore
CVE-2017-7502
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
Mozilla Network Security Services 3.25.0Mozilla Network Security Services 3.29.1Mozilla Network Security Services 3.29.0Mozilla Network Security Services 3.30.0Mozilla Network Security Services 3.29.2Mozilla Network Security Services 3.25.1Mozilla Network Security Services 3.28.1Mozilla Network Security Services 3.26.2Mozilla Network Security Services 3.30.1Mozilla Network Security Services 3.24.0Mozilla Network Security Services 3.27.0Mozilla Network Security Services 3.29.3Mozilla Network Security Services 3.28.0Mozilla Network Security Services 3.27.2Mozilla Network Security Services 3.28.3Mozilla Network Security Services 3.28.2Mozilla Network Security Services 3.27.1Mozilla Network Security Services 3.26.0
890
VMScore
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7, allows remote malicious users to execute arbitrary c...
Mozilla Firefox Esr 24.6Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.10Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.12.6Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.15.5Mozilla Network Security Services 3.16Mozilla Network Security Services 3.4.1Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.7.5Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0
668
VMScore
CVE-2013-5605
Mozilla Network Security Services (NSS) 3.14 prior to 3.14.5 and 3.15 prior to 3.15.3 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.
Mozilla Network Security Services 3.14Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.15Mozilla Network Security Services 3.15.1Mozilla Network Security Services 3.15.2Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.2Mozilla Network Security Services 3.14.1
668
VMScore
CVE-2014-1569
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) prior to 3.16.2.4 and 3.17.x prior to 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote malicious users to conduct data-smu...
Mozilla Network Security Services 3.16.2.1Mozilla Network Security Services 3.16.2.0Mozilla Network Security Services 3.17.2Mozilla Network Security ServicesMozilla Network Security Services 3.16.2.2Mozilla Network Security Services 3.17.1Mozilla Network Security Services 3.17.0
668
VMScore
CVE-2013-1741
Integer overflow in Mozilla Network Security Services (NSS) 3.15 prior to 3.15.3 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via a large size value.
Mozilla Network Security Services 3.15Mozilla Network Security Services 3.15.1Mozilla Network Security Services 3.15.2
516
VMScore
CVE-2013-5606
The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 prior to 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote malicious users ...
Mozilla Network Security Services 3.15.1Mozilla Network Security Services 3.15.2Mozilla Network Security Services 3.15
445
VMScore
CVE-2012-0441
The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) prior to 3.13.4, as used in Firefox 4.x up to and including 12.0, Firefox ESR 10.x prior to 10.0.5, Thunderbird 5.0 up to and including 12.0, Thunderbird ESR 10.x prior to 10.0.5, and SeaMonkey p...
Mozilla Firefox 4.0Mozilla Firefox 5.0Mozilla Firefox 5.0.1Mozilla Firefox 8.0.1Mozilla Firefox 9.0.1Mozilla Firefox Esr 10.0Mozilla Firefox Esr 10.0.1Mozilla Thunderbird 6.0.2Mozilla Thunderbird 7.0.1Mozilla Thunderbird 10.0.1Mozilla Thunderbird 10.0Mozilla Thunderbird 10.0.4Mozilla Thunderbird Esr 10.0.4Mozilla SeamonkeyMozilla Seamonkey 2.8Mozilla Seamonkey 2.7Mozilla Seamonkey 2.6.1Mozilla Seamonkey 2.5Mozilla Seamonkey 2.4Mozilla Seamonkey 2.3Mozilla Firefox 7.0Mozilla Firefox 8.0
668
VMScore
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote malicious users to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
Mozilla Network Security Services 3.2Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.5Mozilla Network Security Services 3.6Mozilla Network Security Services 3.7.7Mozilla Network Security Services 3.8Netscape Directory Server 4.11Netscape Directory Server 4.13Netscape Enterprise Server 3.0.7aNetscape Enterprise Server 3.0lMozilla Network Security Services 3.4.1Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.7.5Netscape Directory Server 3.12Netscape Directory Server 4.1Netscape Enterprise Server 3.0.1Netscape Enterprise Server 3.0.1bNetscape Enterprise Server 3.5Netscape Enterprise Server 3.5.1Netscape Enterprise Server 4.1.1Netscape Enterprise Server 4.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook