Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla network security services 3.12.3.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2014-1492
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) prior to 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the...
Mozilla Network Security Services 3.15.3.1Mozilla Network Security Services 3.12Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.4Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.3Mozilla Network Security Services 3.6Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.7Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.11.5Mozilla Network Security Services 3.12.3.1Mozilla Network Security Services 3.9Mozilla Network Security Services 3.12.3.2Mozilla Network Security Services 3.14.1Mozilla Network Security Services 3.14.2Mozilla Network Security Services 3.15.3Mozilla Network Security Services 3.2Mozilla Network Security Services 3.4.2
10
CVSSv2
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7, allows remote malicious users to execute arbitrary c...
Mozilla Firefox Esr 24.6Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.10Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.12.6Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.15.5Mozilla Network Security Services 3.16Mozilla Network Security Services 3.4.1Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.7.5Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0
6.8
CVSSv2
CVE-2009-2408
Mozilla Network Security Services (NSS) prior to 3.12.3, Firefox prior to 3.0.13, Thunderbird prior to 2.0.0.23, and SeaMonkey prior to 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, ...
Mozilla Network Security ServicesMozilla FirefoxMozilla SeamonkeyMozilla ThunderbirdSuse Linux Enterprise Server 9Suse Linux Enterprise 11.0Suse Linux Enterprise 10.0Opensuse OpensuseDebian Debian Linux 5.0Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 8.04
7.5
CVSSv2
CVE-2010-3173
The SSL implementation in Mozilla Firefox prior to 3.5.14 and 3.6.x prior to 3.6.11, Thunderbird prior to 3.0.9 and 3.1.x prior to 3.1.5, and SeaMonkey prior to 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for r...
Mozilla Firefox 3.6Mozilla Firefox 3.6.8Mozilla Firefox 3.6.2Mozilla Firefox 3.6.10Mozilla Firefox 3.6.9Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.16Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.1.8Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0.1Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7
4.3
CVSSv2
CVE-2010-3170
Mozilla Firefox prior to 3.5.14 and 3.6.x prior to 3.6.11, Thunderbird prior to 3.0.9 and 3.1.x prior to 3.1.5, and SeaMonkey prior to 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle malici...
Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.8Mozilla Firefox 3.6.10Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.9Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.1.15Mozilla Seamonkey 1.1.16Mozilla Seamonkey 1.1.5Mozilla Seamonkey 1.1.6Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.5.0.9Mozilla Seamonkey 2.0Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1
9.3
CVSSv2
CVE-2009-2404
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) prior to 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (applicatio...
Mozilla Network Security Services 3.12.3
5.1
CVSSv2
CVE-2009-2409
The Network Security Services (NSS) library prior to 3.12.3, as used in Firefox; GnuTLS prior to 2.6.4 and 2.7.4; OpenSSL 0.9.8 up to and including 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote malicious users to spoof certificates by us...
Mozilla FirefoxMozilla NssMozilla Nss 3.0Mozilla Nss 3.2Mozilla Nss 3.2.1Mozilla Nss 3.3Mozilla Nss 3.3.1Mozilla Nss 3.3.2Mozilla Nss 3.4Mozilla Nss 3.4.1Mozilla Nss 3.4.2Mozilla Nss 3.4.3Mozilla Nss 3.5Mozilla Nss 3.6Mozilla Nss 3.6.1Mozilla Nss 3.7Mozilla Nss 3.7.1Mozilla Nss 3.7.2Mozilla Nss 3.7.3Mozilla Nss 3.7.5Mozilla Nss 3.7.7Mozilla Nss 3.8
7.1
CVSSv2
CVE-2011-3640
Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome prior to 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response w...
Google Chrome
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook