https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:29:18 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-079 certfr-2015-avi-079 https://cve.radiocsirt.org/vuln/certfr-2015-avi-079 https://cve.radiocsirt.org/vuln/cnvd-2015-01188 cnvd-2015-01188 https://cve.radiocsirt.org/vuln/cnvd-2015-01188 https://cve.radiocsirt.org/vuln/euvd-2026-89785 EUVD-2026-89785 https://cve.radiocsirt.org/vuln/euvd-2026-89785 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0832 <p>Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.</p> <p>Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0832 https://cve.radiocsirt.org/vuln/ghsa-vmh3-65w6-vq3x <p>Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.</p> <p>Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.</p> https://cve.radiocsirt.org/vuln/ghsa-vmh3-65w6-vq3x https://cve.radiocsirt.org/vuln/gsd-2015-0832 gsd-2015-0832 https://cve.radiocsirt.org/vuln/gsd-2015-0832 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0832 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0832