https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:31:51 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-279 certfr-2015-avi-279 https://cve.radiocsirt.org/vuln/certfr-2015-avi-279 https://cve.radiocsirt.org/vuln/cnvd-2015-04425 cnvd-2015-04425 https://cve.radiocsirt.org/vuln/cnvd-2015-04425 https://cve.radiocsirt.org/vuln/euvd-2026-91306 EUVD-2026-91306 https://cve.radiocsirt.org/vuln/euvd-2026-91306 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2721 <p>Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a &#34;SMACK SKIP-TLS&#34; issue.</p> <p>Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a &#34;SMACK SKIP-TLS&#34; issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-2721 https://cve.radiocsirt.org/vuln/ghsa-fhwj-6xh8-h4rw <p>Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a &#34;SMACK SKIP-TLS&#34; issue.</p> <p>Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a &#34;SMACK SKIP-TLS&#34; issue.</p> https://cve.radiocsirt.org/vuln/ghsa-fhwj-6xh8-h4rw https://cve.radiocsirt.org/vuln/gsd-2015-2721 gsd-2015-2721 https://cve.radiocsirt.org/vuln/gsd-2015-2721 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/rhsa-2015:1664 <p>NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71) NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)</p> <p>NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71) NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1664 https://cve.radiocsirt.org/vuln/suse-su-2015:1268-1 <p>Security update for MozillaFirefox, mozilla-nspr, mozilla-nss</p> <p>Security update for MozillaFirefox, mozilla-nspr, mozilla-nss</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1268-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2721 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: nss, Ubuntu:14.04:LTS: thunderbird</p> <p>Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a &#34;SMACK SKIP-TLS&#34; issue.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: nss, Ubuntu:14.04:LTS: thunderbird</p> <p>Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a &#34;SMACK SKIP-TLS&#34; issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2721