https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:39:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03961 bdu:2020-03961 https://cve.radiocsirt.org/vuln/bdu:2020-03961 https://cve.radiocsirt.org/vuln/bell-cve-2020-12401 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-12401 https://cve.radiocsirt.org/vuln/certfr-2020-avi-532 certfr-2020-avi-532 https://cve.radiocsirt.org/vuln/certfr-2020-avi-532 https://cve.radiocsirt.org/vuln/euvd-2026-41227 EUVD-2026-41227 https://cve.radiocsirt.org/vuln/euvd-2026-41227 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12401 <p>During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.</p> <p>During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-12401 https://cve.radiocsirt.org/vuln/ghsa-cm2q-67xf-jw8c <p>During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.</p> <p>During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.</p> https://cve.radiocsirt.org/vuln/ghsa-cm2q-67xf-jw8c https://cve.radiocsirt.org/vuln/gsd-2020-12401 gsd-2020-12401 https://cve.radiocsirt.org/vuln/gsd-2020-12401 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 <p>MozillaFirefox-92.0-1.2 on GA media</p> <p>MozillaFirefox-92.0-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 https://cve.radiocsirt.org/vuln/rhsa-2021:0949 <p>expat: large number of colons in input makes parser consume high amount of resources, leading to DoS e2fsprogs: Crafted ext4 partition leads to out-of-bounds write e2fsprogs: Out-of-bounds write in e2fsck/rehash.c curl: heap buffer overflow in function tftp_receive_packet() nss: Out-of-bounds read when importing curve25519 private key nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 nss: Use-after-free in sftk_FreeSession due to improper refcounting glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass ibus: missing authorization allows local attacker to access the input bus of another user cpio: improper input validation when writing tar header fields leads to unexpected tar generation expat: heap-based buffer over-read via crafted XML input python: XSS vulnerability in the documentation XML-RPC server in server_title field nss: Check length of inputs for cryptographic primitives nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c systemd: memory leak in button_open() in login/logind-button.c when udev events are received libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c python: infinite loop in the tarfi…</p> <p>expat: large number of colons in input makes parser consume high amount of resources, leading to DoS e2fsprogs: Crafted ext4 partition leads to out-of-bounds write e2fsprogs: Out-of-bounds write in e2fsck/rehash.c curl: heap buffer overflow in function tftp_receive_packet() nss: Out-of-bounds read when importing curve25519 private key nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 nss: Use-after-free in sftk_FreeSession due to improper refcounting glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass ibus: missing authorization allows local attacker to access the input bus of another user cpio: improper input validation when writing tar header fields leads to unexpected tar generation expat: heap-based buffer over-read via crafted XML input python: XSS vulnerability in the documentation XML-RPC server in server_title field nss: Check length of inputs for cryptographic primitives nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c systemd: memory leak in button_open() in login/logind-button.c when udev events are received libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c python: infinite loop in the tarfi…</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0949 https://cve.radiocsirt.org/vuln/suse-ru-2021:14818-1 <p>Recommended update for mozilla-nspr, mozilla-nss</p> <p>Recommended update for mozilla-nspr, mozilla-nss</p> https://cve.radiocsirt.org/vuln/suse-ru-2021:14818-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12401 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nss, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: nss, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: nss, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: nss</p> <p>During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nss, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: nss, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: nss, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: nss</p> <p>During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox &lt; 80 and Firefox for Android &lt; 80.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12401 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1831 <p>Ein Angreifer kann eine Schwachstelle in Mozilla NSS ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann eine Schwachstelle in Mozilla NSS ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1831