Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla network security services 3.7 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2011-5094
Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote malicious users to cause a denial of servic...
Mozilla Network Security Services 3.11.2Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.2Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.7.7Mozilla Network Security Services 3.7.5Mozilla Network Security Services 3.7.1Mozilla Network Security Services 3.6Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.9Mozilla Network Security Services 3.4Mozilla Network Security Services 3.8Mozilla Network Security Services 3.4.1Mozilla Network Security Services 3.11.5Mozilla Network Security Services 3.7Mozilla Network Security Services 3.7.2Mozilla Network Security Services 3.3Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.3.2Mozilla Network Security Services 3.5Mozilla Network Security Services 3.11.3
4.3
CVSSv2
CVE-2014-1492
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) prior to 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the...
Mozilla Network Security Services 3.15.3.1Mozilla Network Security Services 3.12Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.4Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.3Mozilla Network Security Services 3.6Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.7Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.11.5Mozilla Network Security Services 3.12.3.1Mozilla Network Security Services 3.9Mozilla Network Security Services 3.12.3.2Mozilla Network Security Services 3.14.1Mozilla Network Security Services 3.14.2Mozilla Network Security Services 3.15.3Mozilla Network Security Services 3.2Mozilla Network Security Services 3.4.2
10
CVSSv2
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7, allows remote malicious users to execute arbitrary c...
Mozilla Firefox Esr 24.6Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.10Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.12.6Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.15.5Mozilla Network Security Services 3.16Mozilla Network Security Services 3.4.1Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.7.5Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0
5
CVSSv2
CVE-2012-0441
The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) prior to 3.13.4, as used in Firefox 4.x up to and including 12.0, Firefox ESR 10.x prior to 10.0.5, Thunderbird 5.0 up to and including 12.0, Thunderbird ESR 10.x prior to 10.0.5, and SeaMonkey p...
Mozilla Firefox 4.0Mozilla Firefox 5.0Mozilla Firefox 5.0.1Mozilla Firefox 8.0.1Mozilla Firefox 9.0.1Mozilla Firefox Esr 10.0Mozilla Firefox Esr 10.0.1Mozilla Thunderbird 6.0.2Mozilla Thunderbird 7.0.1Mozilla Thunderbird 10.0.1Mozilla Thunderbird 10.0Mozilla Thunderbird 10.0.4Mozilla Thunderbird Esr 10.0.4Mozilla SeamonkeyMozilla Seamonkey 2.8Mozilla Seamonkey 2.7Mozilla Seamonkey 2.6.1Mozilla Seamonkey 2.5Mozilla Seamonkey 2.4Mozilla Seamonkey 2.3Mozilla Firefox 7.0Mozilla Firefox 8.0
7.5
CVSSv2
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote malicious users to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
Mozilla Network Security Services 3.2Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.5Mozilla Network Security Services 3.6Mozilla Network Security Services 3.7.7Mozilla Network Security Services 3.8Netscape Directory Server 4.11Netscape Directory Server 4.13Netscape Enterprise Server 3.0.7aNetscape Enterprise Server 3.0lMozilla Network Security Services 3.4.1Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.7.5Netscape Directory Server 3.12Netscape Directory Server 4.1Netscape Enterprise Server 3.0.1Netscape Enterprise Server 3.0.1bNetscape Enterprise Server 3.5Netscape Enterprise Server 3.5.1Netscape Enterprise Server 4.1.1Netscape Enterprise Server 4.1
10
CVSSv2
CVE-2019-17006
In Network Security Services (NSS) prior to 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
Siemens Ruggedcom Rox Mx5000 FirmwareSiemens Ruggedcom Rox Rx1400 FirmwareSiemens Ruggedcom Rox Rx1500 FirmwareSiemens Ruggedcom Rox Rx1501 FirmwareSiemens Ruggedcom Rox Rx1510 FirmwareSiemens Ruggedcom Rox Rx1511 FirmwareSiemens Ruggedcom Rox Rx1512 FirmwareSiemens Ruggedcom Rox Rx5000 FirmwareMozilla Network Security ServicesNetapp Hci Management Node -Netapp Solidfire -Netapp Hci Compute Node -Netapp Hci Storage Node -
5
CVSSv2
CVE-2019-11719
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox &l...
Mozilla FirefoxMozilla Firefox EsrMozilla Thunderbird
6.4
CVSSv2
CVE-2020-12403
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions prior to 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly ...
Mozilla Nss
1.9
CVSSv2
CVE-2020-12401
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
Mozilla Firefox
5
CVSSv2
CVE-2020-6829
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been com...
Mozilla Firefox
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook