Количество 45
Количество 45
openSUSE-SU-2019:1782-1
Security update for MozillaFirefox
SUSE-SU-2019:1960-1
Security update for MozillaThunderbird
SUSE-SU-2019:1869-1
Security update for MozillaFirefox
SUSE-SU-2019:1861-1
Security update for MozillaFirefox
SUSE-SU-2019:14124-1
Security update for MozillaFirefox
GHSA-mg9h-wcqm-m3mw
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
BDU:2019-03616
Уязвимость библиотеки служб сетевой безопасности (NSS) почтового клиента Thunderbird и браузеров Firefox и Firefox ESR, позволяющая нарушителю получить несанкционированный доступ к информации
SUSE-SU-2019:14246-1
Security update for Mozilla Firefox
CVE-2019-11727
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVE-2019-11727
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVE-2019-11727
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVE-2019-11727
A vulnerability exists where it possible to force Network Security Ser ...
CVE-2019-11729
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
CVE-2019-11729
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
CVE-2019-11729
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
CVE-2019-11729
Empty or malformed p256-ECDH public keys may trigger a segmentation fa ...
GHSA-pwq5-w788-7w28
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
BDU:2020-00597
Уязвимость браузера Firefox, связанная с ошибкой службы сетевой безопасности CertificateVerify, позволяющая нарушителю оказать воздействие на целостность данных
GHSA-x7fr-mw8m-fh4w
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
BDU:2019-04642
Уязвимость функции формирования открытых ключей p256-ECDH браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2019:1782-1 Security update for MozillaFirefox | больше 6 лет назад | ||
| SUSE-SU-2019:1960-1 Security update for MozillaThunderbird | больше 6 лет назад | ||
| SUSE-SU-2019:1869-1 Security update for MozillaFirefox | больше 6 лет назад | ||
| SUSE-SU-2019:1861-1 Security update for MozillaFirefox | больше 6 лет назад | ||
| SUSE-SU-2019:14124-1 Security update for MozillaFirefox | больше 6 лет назад | ||
| GHSA-mg9h-wcqm-m3mw When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
 | BDU:2019-03616 Уязвимость библиотеки служб сетевой безопасности (NSS) почтового клиента Thunderbird и браузеров Firefox и Firefox ESR, позволяющая нарушителю получить несанкционированный доступ к информации | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад |
| SUSE-SU-2019:14246-1 Security update for Mozilla Firefox | почти 6 лет назад | ||
 | CVE-2019-11727 A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68. | CVSS3: 5.3 | 0% Низкий | больше 6 лет назад |
 | CVE-2019-11727 A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68. | CVSS3: 3.4 | 0% Низкий | больше 6 лет назад |
 | CVE-2019-11727 A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68. | CVSS3: 5.3 | 0% Низкий | больше 6 лет назад |
| CVE-2019-11727 A vulnerability exists where it possible to force Network Security Ser ... | CVSS3: 5.3 | 0% Низкий | больше 6 лет назад |
| CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 1% Низкий | больше 6 лет назад |
| CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 1% Низкий | больше 6 лет назад |
| CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 1% Низкий | больше 6 лет назад |
| CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fa ... | CVSS3: 7.5 | 1% Низкий | больше 6 лет назад |
| GHSA-pwq5-w788-7w28 A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68. | CVSS3: 5.3 | 0% Низкий | больше 3 лет назад |
| BDU:2020-00597 Уязвимость браузера Firefox, связанная с ошибкой службы сетевой безопасности CertificateVerify, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 5.3 | 0% Низкий | больше 6 лет назад |
| GHSA-x7fr-mw8m-fh4w Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| BDU:2019-04642 Уязвимость функции формирования открытых ключей p256-ECDH браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | больше 6 лет назад |
Уязвимостей на страницу