https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:12:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00136 bdu:2016-00136 https://cve.radiocsirt.org/vuln/bdu:2016-00136 https://cve.radiocsirt.org/vuln/certfr-2016-avi-027 certfr-2016-avi-027 https://cve.radiocsirt.org/vuln/certfr-2016-avi-027 https://cve.radiocsirt.org/vuln/cnvd-2015-08557 cnvd-2015-08557 https://cve.radiocsirt.org/vuln/cnvd-2015-08557 https://cve.radiocsirt.org/vuln/euvd-2026-95085 EUVD-2026-95085 https://cve.radiocsirt.org/vuln/euvd-2026-95085 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7575 <p>Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.</p> <p>Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-7575 https://cve.radiocsirt.org/vuln/ghsa-7x7m-5xcm-74v2 <p>Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.</p> <p>Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.</p> https://cve.radiocsirt.org/vuln/ghsa-7x7m-5xcm-74v2 https://cve.radiocsirt.org/vuln/gsd-2015-7575 gsd-2015-7575 https://cve.radiocsirt.org/vuln/gsd-2015-7575 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/rhsa-2016:0050 <p>TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) OpenJDK: URL deserialization inconsistencies (Networking, 8059054) OpenJDK: logging of RMI connection secrets (JMX, 8130710) OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) OpenJDK: PBE incorrect key lengths (Libraries, 8138589) OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)</p> <p>TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) OpenJDK: URL deserialization inconsistencies (Networking, 8059054) OpenJDK: logging of RMI connection secrets (JMX, 8130710) OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) OpenJDK: PBE incorrect key lengths (Libraries, 8138589) OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0050 https://cve.radiocsirt.org/vuln/suse-su-2016:0149-1 <p>Security update for mozilla-nss</p> <p>Security update for mozilla-nss</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0149-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7575 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: gnutls26, Ubuntu:14.04:LTS: nss, Ubuntu:14.04:LTS: openjdk-6, Ubuntu:14.04:LTS: openjdk-7, Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: thunderbird</p> <p>Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: gnutls26, Ubuntu:14.04:LTS: nss, Ubuntu:14.04:LTS: openjdk-6, Ubuntu:14.04:LTS: openjdk-7, Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: thunderbird</p> <p>Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7575 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0428 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiedenen TLS-Implementierungen ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiedenen TLS-Implementierungen ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0428