Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mozilla network security services 3.12.8 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2014-1492

The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) prior to 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the...
Mozilla Network Security Services 3.11.2Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.2Mozilla Network Security Services 3.15Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.7.7Mozilla Network Security Services 3.14.1Mozilla Network Security Services 3.7.5Mozilla Network Security Services 3.7.1Mozilla Network Security Services 3.12.9Mozilla Network Security Services 3.15.3Mozilla Network Security Services 3.12.3.1Mozilla Network Security Services 3.6Mozilla Network Security Services 3.12.6Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.12.8Mozilla Network Security ServicesMozilla Network Security Services 3.15.1Mozilla Network Security Services 3.12.11Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4
NA

CVE-2014-1544

Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7, allows remote malicious users to execute arbitrary c...
Mozilla Network Security Services 3.11.2Mozilla Network Security Services 3.6.1Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.2Mozilla Network Security Services 3.15Mozilla Firefox Esr 24.5Mozilla Network Security Services 3.11.4Mozilla Network Security Services 3.7.7Mozilla Network Security Services 3.14.1Mozilla Network Security Services 3.7.5Mozilla Network Security Services 3.7.1Mozilla Network Security Services 3.12.9Mozilla Firefox Esr 24.2Mozilla Network Security Services 3.15.3Mozilla Network Security Services 3.12.3.1Mozilla Network Security Services 3.6Mozilla Thunderbird 24.0.1Mozilla Network Security Services 3.12.6Mozilla Network Security Services 3.2.1Mozilla Network Security Services 3.12.8Mozilla Thunderbird 24.2Mozilla Network Security Services 3.15.1
NA

CVE-2013-5605

Mozilla Network Security Services (NSS) 3.14 prior to 3.14.5 and 3.15 prior to 3.15.3 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.
Mozilla Network Security Services 3.15Mozilla Network Security Services 3.14.1Mozilla Network Security Services 3.15.1Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.14Mozilla Network Security Services 3.15.2Mozilla Network Security Services 3.14.2
NA

CVE-2010-3173

The SSL implementation in Mozilla Firefox prior to 3.5.14 and 3.6.x prior to 3.6.11, Thunderbird prior to 3.0.9 and 3.1.x prior to 3.1.5, and SeaMonkey prior to 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for r...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.8Mozilla Firefox 3.6.9Mozilla Firefox 3.6.6Mozilla Firefox 3.6.10Mozilla Firefox 3.6.7Mozilla Firefox 3.6.4Mozilla Firefox 3.6Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.5.0.10Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 1.0Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.2
NA

CVE-2010-3170

Mozilla Firefox prior to 3.5.14 and 3.6.x prior to 3.6.11, Thunderbird prior to 3.0.9 and 3.1.x prior to 3.1.5, and SeaMonkey prior to 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle malici...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.8Mozilla Firefox 3.6.9Mozilla Firefox 3.6.6Mozilla Firefox 3.6.10Mozilla Firefox 3.6.7Mozilla Firefox 3.6.4Mozilla Firefox 3.6Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.5.0.10Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 1.0Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.2
NA

CVE-2011-3640

Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome prior to 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response w...
Google Chrome
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook