https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:23:07 +0000 https://cve.radiocsirt.org/vuln/certfr-2014-avi-053 certfr-2014-avi-053 https://cve.radiocsirt.org/vuln/certfr-2014-avi-053 https://cve.radiocsirt.org/vuln/euvd-2026-97662 EUVD-2026-97662 https://cve.radiocsirt.org/vuln/euvd-2026-97662 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1491 <p>Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.</p> <p>Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-1491 https://cve.radiocsirt.org/vuln/ghsa-v496-3mj8-fpc6 <p>Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.</p> <p>Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.</p> https://cve.radiocsirt.org/vuln/ghsa-v496-3mj8-fpc6 https://cve.radiocsirt.org/vuln/gsd-2014-1491 gsd-2014-1491 https://cve.radiocsirt.org/vuln/gsd-2014-1491 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/rhsa-2014:0917 <p>nss: false start PR_Recv information disclosure security issue nss: TOCTOU, potential use-after-free in libssl&#39;s session ticket processing (MFSA 2014-12) nss: Do not allow p-1 as a public DH value (MFSA 2014-12) nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63) Mozilla: Out of bounds write in NSPR (MFSA 2014-55)</p> <p>nss: false start PR_Recv information disclosure security issue nss: TOCTOU, potential use-after-free in libssl&#39;s session ticket processing (MFSA 2014-12) nss: Do not allow p-1 as a public DH value (MFSA 2014-12) nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63) Mozilla: Out of bounds write in NSPR (MFSA 2014-55)</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0917