https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:54:56.524078+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-ale-014 certa-2009-ale-014 — De multiples vulnérabilités conduisant, entre autres, à une exécution de code arbitraire à distance ont été découvertes… 2026-10-03T14:54:56.685146+00:00 certa-2009-ale-014 https://cve.radiocsirt.org/vuln/certa-2009-avi-306 certa-2009-avi-306 — Plusieurs vulnérabilités affectent le navigateur Firefox et permettent à un utilisateur malveillant d'exécuter du code… 2026-10-03T14:54:56.685191+00:00 certa-2009-avi-306 https://cve.radiocsirt.org/vuln/euvd-2026-123333 EUVD-2026-123333 2026-10-03T14:54:56.685207+00:00 EUVD-2026-123333 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2408 fkie_cve-2009-2408 2026-10-03T14:54:56.685220+00:00

Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.

 https://cve.radiocsirt.org/vuln/ghsa-pm7c-vg9h-jxxc GHSA-pm7c-vg9h-jxxc 2026-10-03T14:54:56.685253+00:00

Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.

 https://cve.radiocsirt.org/vuln/gsd-2009-2408 gsd-2009-2408 2026-10-03T14:54:56.685272+00:00 gsd-2009-2408 https://cve.radiocsirt.org/vuln/rhsa-2009:1184 RHSA-2009:1184 — Red Hat Security Advisory: nspr and nss security and bug fix update 2026-10-03T14:54:56.685283+00:00

nss regexp heap overflow firefox/nss: doesn't handle NULL in Common Name properly deprecate MD2 in SSL cert validation (Kaminsky)