Поиск уязвимостей
Количество 22
Количество 22
ELSA-2014-0917
ELSA-2014-0917: nss and nspr security, bug fix, and enhancement update (CRITICAL)
ALT-PU-2014-1618
ALT-PU-2014-1618: package `nss` update to version 3.16.1-alt1
CVE-2014-1492
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
CVE-2014-1492
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
CVE-2014-1492
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
CVE-2014-1492
The cert_TestHostName function in lib/certdb/certdb.c in the certifica ...
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function i ...
GHSA-fxvw-6w4h-3mx5
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
ELSA-2014-1073
ELSA-2014-1073: nss, nss-util, nss-softokn security, bug fix, and enhancement update (LOW)
BDU:2015-00680
Уязвимость программного обеспечения SeaMonkey, позволяющая удаленному злоумышленнику нарушить защищаемой информации
BDU:2015-00420
Уязвимость браузера Firefox, позволяющая удаленному злоумышленнику нарушить целостность защищаемой информации
GHSA-pwp6-rmm8-g5j6
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
ELSA-2014-0916
ELSA-2014-0916: nss and nspr security update (CRITICAL)
BDU:2015-00701
Уязвимость программного обеспечения Thunderbird, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
BDU:2015-00460
Уязвимость программного обеспечения Firefox ESR, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
BDU:2015-00431
Уязвимость браузера Firefox, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
ELSA-2014-1246
ELSA-2014-1246: nss and nspr security, bug fix, and enhancement update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2014-0917 ELSA-2014-0917: nss and nspr security, bug fix, and enhancement update (CRITICAL) | больше 12 лет назад | ||
| ALT-PU-2014-1618 ALT-PU-2014-1618: package `nss` update to version 3.16.1-alt1 | CVSS2: 10 | больше 12 лет назад | |
 | CVE-2014-1492 The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate. | CVSS2: 4.3 | 2% Низкий | больше 12 лет назад |
 | CVE-2014-1492 The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate. | CVSS2: 2.6 | 2% Низкий | больше 12 лет назад |
 | CVE-2014-1492 The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate. | CVSS2: 4.3 | 2% Низкий | больше 12 лет назад |
| CVE-2014-1492 The cert_TestHostName function in lib/certdb/certdb.c in the certifica ... | CVSS2: 4.3 | 2% Низкий | больше 12 лет назад |
| CVE-2014-1544 Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain. | CVSS2: 10 | 6% Низкий | больше 12 лет назад |
| CVE-2014-1544 Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain. | CVSS2: 6.8 | 6% Низкий | больше 12 лет назад |
| CVE-2014-1544 Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain. | CVSS2: 10 | 6% Низкий | больше 12 лет назад |
| CVE-2014-1544 Use-after-free vulnerability in the CERT_DestroyCertificate function i ... | CVSS2: 10 | 6% Низкий | больше 12 лет назад |
| GHSA-fxvw-6w4h-3mx5 The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate. | 2% Низкий | больше 4 лет назад | |
| ELSA-2014-1073 ELSA-2014-1073: nss, nss-util, nss-softokn security, bug fix, and enhancement update (LOW) | 2% Низкий | около 12 лет назад | |
 | BDU:2015-00680 Уязвимость программного обеспечения SeaMonkey, позволяющая удаленному злоумышленнику нарушить защищаемой информации | CVSS2: 4.3 | 2% Низкий | больше 12 лет назад |
| BDU:2015-00420 Уязвимость браузера Firefox, позволяющая удаленному злоумышленнику нарушить целостность защищаемой информации | CVSS2: 4.3 | 2% Низкий | больше 12 лет назад |
| GHSA-pwp6-rmm8-g5j6 Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain. | 6% Низкий | больше 4 лет назад | |
| ELSA-2014-0916 ELSA-2014-0916: nss and nspr security update (CRITICAL) | 6% Низкий | больше 12 лет назад | |
| BDU:2015-00701 Уязвимость программного обеспечения Thunderbird, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации | CVSS2: 10 | 6% Низкий | больше 12 лет назад |
| BDU:2015-00460 Уязвимость программного обеспечения Firefox ESR, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации | CVSS2: 10 | 6% Низкий | больше 12 лет назад |
| BDU:2015-00431 Уязвимость браузера Firefox, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации | CVSS2: 10 | 6% Низкий | больше 12 лет назад |
| ELSA-2014-1246 ELSA-2014-1246: nss and nspr security, bug fix, and enhancement update (MODERATE) | около 12 лет назад |
Уязвимостей на страницу