https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:07:08.565682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-642 certa-2013-avi-642 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Mozilla</span>. Elles permettent à… 2026-10-03T03:07:08.599522+00:00 certa-2013-avi-642 https://cve.radiocsirt.org/vuln/euvd-2026-108163 EUVD-2026-108163 2026-10-03T03:07:08.599572+00:00 EUVD-2026-108163 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5606 fkie_cve-2013-5606 2026-10-03T03:07:08.599588+00:00

The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.

 https://cve.radiocsirt.org/vuln/ghsa-mphq-fg36-pppm GHSA-mphq-fg36-pppm 2026-10-03T03:07:08.599623+00:00

The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.

 https://cve.radiocsirt.org/vuln/gsd-2013-5606 gsd-2013-5606 2026-10-03T03:07:08.599640+00:00 gsd-2013-5606 https://cve.radiocsirt.org/vuln/rhsa-2013:1791 RHSA-2013:1791 — Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update 2026-10-03T03:07:08.599652+00:00

nss: Avoid uninitialized data read in the event of a decryption failure nss: Integer truncation in certificate parsing (MFSA 2013-103) nss: Null_Cipher() does not respect maxOutputLen (MFSA 2013-103) nss: CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates (MFSA 2013-103) nspr: Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)