https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:34:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-105579 EUVD-2026-105579 https://cve.radiocsirt.org/vuln/euvd-2026-105579 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1740 <p>The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.</p> <p>The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1740 https://cve.radiocsirt.org/vuln/ghsa-26rr-whcg-5f4g <p>The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.</p> <p>The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.</p> https://cve.radiocsirt.org/vuln/ghsa-26rr-whcg-5f4g https://cve.radiocsirt.org/vuln/gsd-2013-1740 gsd-2013-1740 https://cve.radiocsirt.org/vuln/gsd-2013-1740 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10451-1 <p>libfreebl3-3.26.2-1.1 on GA media</p> <p>libfreebl3-3.26.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10451-1 https://cve.radiocsirt.org/vuln/rhsa-2014:0917 <p>nss: false start PR_Recv information disclosure security issue nss: TOCTOU, potential use-after-free in libssl&#39;s session ticket processing (MFSA 2014-12) nss: Do not allow p-1 as a public DH value (MFSA 2014-12) nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63) Mozilla: Out of bounds write in NSPR (MFSA 2014-55)</p> <p>nss: false start PR_Recv information disclosure security issue nss: TOCTOU, potential use-after-free in libssl&#39;s session ticket processing (MFSA 2014-12) nss: Do not allow p-1 as a public DH value (MFSA 2014-12) nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63) Mozilla: Out of bounds write in NSPR (MFSA 2014-55)</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0917