Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla network security services 3.9 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2011-5094
Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote malicious users to cause a denial of servic...
Mozilla Network Security Services 3.11.2Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.2Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.7.7Mozilla Network Security Services 3.7.5Mozilla Network Security Services 3.7.1Mozilla Network Security Services 3.6Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.9Mozilla Network Security Services 3.4Mozilla Network Security Services 3.8Mozilla Network Security Services 3.4.1Mozilla Network Security Services 3.11.5Mozilla Network Security Services 3.7Mozilla Network Security Services 3.7.2Mozilla Network Security Services 3.3Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.3.2Mozilla Network Security Services 3.5Mozilla Network Security Services 3.11.3
4.3
CVSSv2
CVE-2014-1492
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) prior to 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the...
Mozilla Network Security Services 3.15.3.1Mozilla Network Security Services 3.12Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.4Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.3Mozilla Network Security Services 3.6Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.7Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.11.5Mozilla Network Security Services 3.12.3.1Mozilla Network Security Services 3.9Mozilla Network Security Services 3.12.3.2Mozilla Network Security Services 3.14.1Mozilla Network Security Services 3.14.2Mozilla Network Security Services 3.15.3Mozilla Network Security Services 3.2Mozilla Network Security Services 3.4.2
10
CVSSv2
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7, allows remote malicious users to execute arbitrary c...
Mozilla Firefox Esr 24.6Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.10Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.12.6Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.15.5Mozilla Network Security Services 3.16Mozilla Network Security Services 3.4.1Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.7.5Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0
5
CVSSv2
CVE-2012-0441
The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) prior to 3.13.4, as used in Firefox 4.x up to and including 12.0, Firefox ESR 10.x prior to 10.0.5, Thunderbird 5.0 up to and including 12.0, Thunderbird ESR 10.x prior to 10.0.5, and SeaMonkey p...
Mozilla Firefox 4.0Mozilla Firefox 5.0Mozilla Firefox 5.0.1Mozilla Firefox 8.0.1Mozilla Firefox 9.0.1Mozilla Firefox Esr 10.0Mozilla Firefox Esr 10.0.1Mozilla Thunderbird 6.0.2Mozilla Thunderbird 7.0.1Mozilla Thunderbird 10.0.1Mozilla Thunderbird 10.0Mozilla Thunderbird 10.0.4Mozilla Thunderbird Esr 10.0.4Mozilla SeamonkeyMozilla Seamonkey 2.8Mozilla Seamonkey 2.7Mozilla Seamonkey 2.6.1Mozilla Seamonkey 2.5Mozilla Seamonkey 2.4Mozilla Seamonkey 2.3Mozilla Firefox 7.0Mozilla Firefox 8.0
7.5
CVSSv2
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote malicious users to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
Mozilla Network Security Services 3.2Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.5Mozilla Network Security Services 3.6Mozilla Network Security Services 3.7.7Mozilla Network Security Services 3.8Netscape Directory Server 4.11Netscape Directory Server 4.13Netscape Enterprise Server 3.0.7aNetscape Enterprise Server 3.0lMozilla Network Security Services 3.4.1Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.7.5Netscape Directory Server 3.12Netscape Directory Server 4.1Netscape Enterprise Server 3.0.1Netscape Enterprise Server 3.0.1bNetscape Enterprise Server 3.5Netscape Enterprise Server 3.5.1Netscape Enterprise Server 4.1.1Netscape Enterprise Server 4.1
5.1
CVSSv2
CVE-2009-2409
The Network Security Services (NSS) library prior to 3.12.3, as used in Firefox; GnuTLS prior to 2.6.4 and 2.7.4; OpenSSL 0.9.8 up to and including 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote malicious users to spoof certificates by us...
Mozilla FirefoxMozilla NssMozilla Nss 3.0Mozilla Nss 3.2Mozilla Nss 3.2.1Mozilla Nss 3.3Mozilla Nss 3.3.1Mozilla Nss 3.3.2Mozilla Nss 3.4Mozilla Nss 3.4.1Mozilla Nss 3.4.2Mozilla Nss 3.4.3Mozilla Nss 3.5Mozilla Nss 3.6Mozilla Nss 3.6.1Mozilla Nss 3.7Mozilla Nss 3.7.1Mozilla Nss 3.7.2Mozilla Nss 3.7.3Mozilla Nss 3.7.5Mozilla Nss 3.7.7Mozilla Nss 3.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook