https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:44:02.853204+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2020-12403 Withdrawn: BELL-CVE-2020-12403 — CVE-2020-12403 does not affect BellSoft software 2026-10-02T13:44:03.147186+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-02T13:44:03.147251+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cnvd-2020-43765 cnvd-2020-43765 2026-10-02T13:44:03.147271+00:00 cnvd-2020-43765 https://cve.radiocsirt.org/vuln/euvd-2026-41236 EUVD-2026-41236 2026-10-02T13:44:03.147284+00:00 EUVD-2026-41236 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12403 fkie_cve-2020-12403 2026-10-02T13:44:03.147294+00:00

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.

 https://cve.radiocsirt.org/vuln/ghsa-9h25-47mw-52hh GHSA-9h25-47mw-52hh 2026-10-02T13:44:03.147323+00:00

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.

 https://cve.radiocsirt.org/vuln/gsd-2020-12403 gsd-2020-12403 2026-10-02T13:44:03.147345+00:00 gsd-2020-12403 https://cve.radiocsirt.org/vuln/msrc_cve-2020-12403 msrc_CVE-2020-12403 — A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Cha… 2026-10-02T13:44:03.147355+00:00 msrc_CVE-2020-12403 https://cve.radiocsirt.org/vuln/oesa-2021-1115 OESA-2021-1115 — nss security update 2026-10-02T13:44:03.147372+00:00

Affected: openEuler:20.03-LTS: nss

Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. Security Fix(es): A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.(CVE-2020-12403)

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.(CVE-2020-25648)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11058-1 openSUSE-SU-2024:11058-1 — libfreebl3-3.69.1-1.2 on GA media 2026-10-02T13:44:03.147402+00:00

libfreebl3-3.69.1-1.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:0758 RHSA-2021:0758 — Red Hat Security Advisory: nss-softokn security update 2026-10-02T13:44:03.147427+00:00

nss: Use-after-free in sftk_FreeSession due to improper refcounting nss: Check length of inputs for cryptographic primitives nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

 https://cve.radiocsirt.org/vuln/suse-ru-2021:14818-1 SUSE-RU-2021:14818-1 — Recommended update for mozilla-nspr, mozilla-nss 2026-10-02T13:44:03.147446+00:00

Recommended update for mozilla-nspr, mozilla-nss

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12403 UBUNTU-CVE-2020-12403 2026-10-02T13:44:03.147463+00:00

Affected: Ubuntu:Pro:14.04:LTS: nss, Ubuntu:16.04:LTS: nss, Ubuntu:18.04:LTS: nss, Ubuntu:20.04:LTS: nss

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1831 WID-SEC-W-2022-1831 — Mozilla NSS: Schwachstelle ermöglicht nicht spezifizierten Angriff 2026-10-02T13:44:03.147487+00:00

Ein Angreifer kann eine Schwachstelle in Mozilla NSS ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.