https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:34:32.366281+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105579 EUVD-2026-105579 2026-10-02T21:34:32.452721+00:00 EUVD-2026-105579 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1740 fkie_cve-2013-1740 2026-10-02T21:34:32.452757+00:00

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

 https://cve.radiocsirt.org/vuln/ghsa-26rr-whcg-5f4g GHSA-26rr-whcg-5f4g 2026-10-02T21:34:32.452789+00:00

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

 https://cve.radiocsirt.org/vuln/gsd-2013-1740 gsd-2013-1740 2026-10-02T21:34:32.452807+00:00 gsd-2013-1740 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10451-1 openSUSE-SU-2024:10451-1 — libfreebl3-3.26.2-1.1 on GA media 2026-10-02T21:34:32.452818+00:00

libfreebl3-3.26.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2014:0917 RHSA-2014:0917 — Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update 2026-10-02T21:34:32.452843+00:00

nss: false start PR_Recv information disclosure security issue nss: TOCTOU, potential use-after-free in libssl's session ticket processing (MFSA 2014-12) nss: Do not allow p-1 as a public DH value (MFSA 2014-12) nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63) Mozilla: Out of bounds write in NSPR (MFSA 2014-55)