Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:35:38 +0000 certa-2009-ale-014 — De multiples vulnérabilités conduisant, entre autres, à une exécution de code arbitraire à distance ont été découvertes… https://cve.radiocsirt.org/vuln/certa-2009-ale-014 certa-2009-ale-014 https://cve.radiocsirt.org/vuln/certa-2009-ale-014 certa-2009-avi-306 — Plusieurs vulnérabilités affectent le navigateur Firefox et permettent à un utilisateur malveillant d'exécuter du code… https://cve.radiocsirt.org/vuln/certa-2009-avi-306 certa-2009-avi-306 https://cve.radiocsirt.org/vuln/certa-2009-avi-306 EUVD-2026-123333 https://cve.radiocsirt.org/vuln/euvd-2026-123333 EUVD-2026-123333 https://cve.radiocsirt.org/vuln/euvd-2026-123333 fkie_cve-2009-2408 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2408 <p>Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a &#39;\0&#39; character in a domain name in the subject&#39;s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.</p> <p>Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a &#39;\0&#39; character in a domain name in the subject&#39;s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-2408 GHSA-pm7c-vg9h-jxxc https://cve.radiocsirt.org/vuln/ghsa-pm7c-vg9h-jxxc <p>Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a &#39;\0&#39; character in a domain name in the subject&#39;s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.</p> <p>Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a &#39;\0&#39; character in a domain name in the subject&#39;s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.</p> https://cve.radiocsirt.org/vuln/ghsa-pm7c-vg9h-jxxc gsd-2009-2408 https://cve.radiocsirt.org/vuln/gsd-2009-2408 gsd-2009-2408 https://cve.radiocsirt.org/vuln/gsd-2009-2408 RHSA-2009:1184 — Red Hat Security Advisory: nspr and nss security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2009:1184 <p>nss regexp heap overflow firefox/nss: doesn&#39;t handle NULL in Common Name properly deprecate MD2 in SSL cert validation (Kaminsky)</p> <p>nss regexp heap overflow firefox/nss: doesn&#39;t handle NULL in Common Name properly deprecate MD2 in SSL cert validation (Kaminsky)</p> https://cve.radiocsirt.org/vuln/rhsa-2009:1184