Поиск уязвимостей
Количество 51
Количество 51
openSUSE-SU-2019:1813-1
Security update for MozillaThunderbird
openSUSE-SU-2019:1811-1
Security update for MozillaFirefox
openSUSE-SU-2019:1782-1
Security update for MozillaFirefox
SUSE-SU-2019:1960-1
Security update for MozillaThunderbird
SUSE-SU-2019:1869-1
Security update for MozillaFirefox
SUSE-SU-2019:1861-1
Security update for MozillaFirefox
SUSE-SU-2019:14124-1
Security update for MozillaFirefox
GHSA-mg9h-wcqm-m3mw
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
BDU:2019-03616
Уязвимость библиотеки служб сетевой безопасности (NSS) почтового клиента Thunderbird и браузеров Firefox и Firefox ESR, позволяющая нарушителю получить несанкционированный доступ к информации
ALT-PU-2019-2249
ALT-PU-2019-2249: package `thunderbird` update to version 60.8.0-alt1
ALT-PU-2019-2231
ALT-PU-2019-2231: package `firefox-esr` update to version 60.8.0-alt1
ALT-PU-2019-2324
ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1
SUSE-SU-2019:14246-1
Security update for Mozilla Firefox
CVE-2019-11727
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVE-2019-11727
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVE-2019-11727
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVE-2019-11727
A vulnerability exists where it possible to force Network Security Ser ...
CVE-2019-11729
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
CVE-2019-11729
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
CVE-2019-11729
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2019:1813-1 Security update for MozillaThunderbird | больше 7 лет назад | ||
| openSUSE-SU-2019:1811-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| openSUSE-SU-2019:1782-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| SUSE-SU-2019:1960-1 Security update for MozillaThunderbird | больше 7 лет назад | ||
| SUSE-SU-2019:1869-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| SUSE-SU-2019:1861-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| SUSE-SU-2019:14124-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| GHSA-mg9h-wcqm-m3mw When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 2% Низкий | больше 4 лет назад |
 | BDU:2019-03616 Уязвимость библиотеки служб сетевой безопасности (NSS) почтового клиента Thunderbird и браузеров Firefox и Firefox ESR, позволяющая нарушителю получить несанкционированный доступ к информации | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
| ALT-PU-2019-2249 ALT-PU-2019-2249: package `thunderbird` update to version 60.8.0-alt1 | CVSS3: 9.8 | больше 7 лет назад | |
| ALT-PU-2019-2231 ALT-PU-2019-2231: package `firefox-esr` update to version 60.8.0-alt1 | CVSS3: 9.8 | больше 7 лет назад | |
| ALT-PU-2019-2324 ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1 | CVSS3: 9.8 | больше 7 лет назад | |
| SUSE-SU-2019:14246-1 Security update for Mozilla Firefox | почти 7 лет назад | ||
 | CVE-2019-11727 A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68. | CVSS3: 5.3 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-11727 A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68. | CVSS3: 3.4 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-11727 A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68. | CVSS3: 5.3 | 2% Низкий | больше 7 лет назад |
| CVE-2019-11727 A vulnerability exists where it possible to force Network Security Ser ... | CVSS3: 5.3 | 2% Низкий | больше 7 лет назад |
| CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
| CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
| CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
Уязвимостей на страницу