https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:05:56.498856+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-00420 bdu:2015-00420 2026-10-02T17:05:56.776719+00:00 bdu:2015-00420 https://cve.radiocsirt.org/vuln/certfr-2014-avi-209 certfr-2014-avi-209 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Mozilla</span>. Certaines d'entre… 2026-10-02T17:05:56.776768+00:00 certfr-2014-avi-209 https://cve.radiocsirt.org/vuln/euvd-2026-97665 EUVD-2026-97665 2026-10-02T17:05:56.776789+00:00 EUVD-2026-97665 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1492 fkie_cve-2014-1492 2026-10-02T17:05:56.776802+00:00

The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

 https://cve.radiocsirt.org/vuln/ghsa-fxvw-6w4h-3mx5 GHSA-fxvw-6w4h-3mx5 2026-10-02T17:05:56.776834+00:00

The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

 https://cve.radiocsirt.org/vuln/gsd-2014-1492 gsd-2014-1492 2026-10-02T17:05:56.776851+00:00 gsd-2014-1492 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-02T17:05:56.776862+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2014:0917 RHSA-2014:0917 — Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update 2026-10-02T17:05:56.777351+00:00

nss: false start PR_Recv information disclosure security issue nss: TOCTOU, potential use-after-free in libssl's session ticket processing (MFSA 2014-12) nss: Do not allow p-1 as a public DH value (MFSA 2014-12) nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63) Mozilla: Out of bounds write in NSPR (MFSA 2014-55)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1492 UBUNTU-CVE-2014-1492 2026-10-02T17:05:56.777380+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: nss

The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.