https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:05:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00420 bdu:2015-00420 https://cve.radiocsirt.org/vuln/bdu:2015-00420 https://cve.radiocsirt.org/vuln/certfr-2014-avi-209 certfr-2014-avi-209 https://cve.radiocsirt.org/vuln/certfr-2014-avi-209 https://cve.radiocsirt.org/vuln/euvd-2026-97665 EUVD-2026-97665 https://cve.radiocsirt.org/vuln/euvd-2026-97665 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1492 <p>The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name&#39;s U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.</p> <p>The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name&#39;s U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-1492 https://cve.radiocsirt.org/vuln/ghsa-fxvw-6w4h-3mx5 <p>The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name&#39;s U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.</p> <p>The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name&#39;s U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-fxvw-6w4h-3mx5 https://cve.radiocsirt.org/vuln/gsd-2014-1492 gsd-2014-1492 https://cve.radiocsirt.org/vuln/gsd-2014-1492 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/rhsa-2014:0917 <p>nss: false start PR_Recv information disclosure security issue nss: TOCTOU, potential use-after-free in libssl&#39;s session ticket processing (MFSA 2014-12) nss: Do not allow p-1 as a public DH value (MFSA 2014-12) nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63) Mozilla: Out of bounds write in NSPR (MFSA 2014-55)</p> <p>nss: false start PR_Recv information disclosure security issue nss: TOCTOU, potential use-after-free in libssl&#39;s session ticket processing (MFSA 2014-12) nss: Do not allow p-1 as a public DH value (MFSA 2014-12) nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63) Mozilla: Out of bounds write in NSPR (MFSA 2014-55)</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0917 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1492 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: nss</p> <p>The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name&#39;s U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: nss</p> <p>The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name&#39;s U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1492