https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:49:56.545655+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:0786 ALSA-2024:0786 — Moderate: nss security update 2026-10-04T05:49:56.908694+00:00

Affected: AlmaLinux:8: nss, AlmaLinux:8: nss-devel, AlmaLinux:8: nss-softokn, AlmaLinux:8: nss-softokn-devel, AlmaLinux:8: nss-softokn-freebl, AlmaLinux:8: nss-softokn-freebl-devel, AlmaLinux:8: nss-sysinit, AlmaLinux:8: nss-tools, AlmaLinux:8: nss-util, AlmaLinux:8: nss-util-devel

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

* nss: vulnerable to Minerva side-channel information leak (CVE-2023-6135)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-09056 bdu:2023-09056 2026-10-04T05:49:56.908781+00:00 bdu:2023-09056 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1048 certfr-2023-avi-1048 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Mozilla</span>. Elles permettent… 2026-10-04T05:49:56.908800+00:00 certfr-2023-avi-1048 https://cve.radiocsirt.org/vuln/euvd-2026-217056 EUVD-2026-217056 2026-10-04T05:49:56.908817+00:00 EUVD-2026-217056 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6135 fkie_cve-2023-6135 2026-10-04T05:49:56.908829+00:00

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

 https://cve.radiocsirt.org/vuln/ghsa-jxv6-m6pm-cqh2 GHSA-jxv6-m6pm-cqh2 2026-10-04T05:49:56.908852+00:00

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

 https://cve.radiocsirt.org/vuln/gsd-2023-6135 gsd-2023-6135 2026-10-04T05:49:56.908867+00:00 gsd-2023-6135 https://cve.radiocsirt.org/vuln/oesa-2025-1322 OESA-2025-1322 — firefox security update 2026-10-04T05:49:56.908878+00:00

Affected: openEuler:22.03-LTS-SP3: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

Multiple NSS NIST curves were susceptible to a side-channel attack known as &quot;Minerva&quot;. This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox &lt; 121.(CVE-2023-6135)

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox &lt; 120, Firefox ESR &lt; 115.5.0, and Thunderbird &lt; 115.5.(CVE-2023-6207)

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox &lt; 120, Firefox ESR &lt; 115.5.0, and Thunderbird &lt; 115.5.(CVE-2023-6208)

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal &quot;/../&quot; part in the path could be used to override the specified host…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13531-1 openSUSE-SU-2024:13531-1 — MozillaFirefox-121.0-1.1 on GA media 2026-10-04T05:49:56.908946+00:00

MozillaFirefox-121.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:0785 RHSA-2024:0785 — Red Hat Security Advisory: nss security update 2026-10-04T05:49:56.908975+00:00

nss: vulnerable to Minerva side-channel information leak

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6135 UBUNTU-CVE-2023-6135 2026-10-04T05:49:56.908992+00:00

Affected: Ubuntu:Pro:14.04:LTS: nss, Ubuntu:Pro:16.04:LTS: nss, Ubuntu:18.04:LTS: mozjs52, Ubuntu:Pro:18.04:LTS: nss, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: nss, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102 and 4 more

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3185 WID-SEC-W-2023-3185 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-04T05:49:56.909029+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen und undefiniertes Verhalten zu verursachen.