NS
Product
Network Security Services
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 12Medium 8Low 1
Watch
Add Network Security Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2834 | 8.8 | Jun 13 | Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and… Affected: through 3.22 |
| CVE-2016-1979 | 8.8 | Mar 13 | Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before… Affected: through 3.21 |
| CVE-2016-1950 | 8.8 | Mar 13 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR… Affected: 3.19.2; 3.20; 3.20.1; 3.21 |
| CVE-2017-11698 | 7.8 | Dec 27 | Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified… Affected: All versions, or not specified |
| CVE-2017-11697 | 7.8 | Dec 27 | The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and… Affected: All versions, or not specified |
| CVE-2017-11696 | 7.8 | Dec 27 | Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified… Affected: All versions, or not specified |
| CVE-2017-11695 | 7.8 | Dec 27 | Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified… Affected: All versions, or not specified |
| CVE-2022-3479 | 7.5 | Oct 14 | A vulnerability found in nss Affected: 3.77 before 3.87 |
| CVE-2019-17007 | 7.5 | Oct 22 | In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service Affected: before 3.44 |
| CVE-2020-25648 | 7.5 | Oct 20 | A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3 Affected: before 3.58 |
| CVE-2017-7502 | 7.5 | May 30 | Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker Affected: 3.24.0; 3.25.0; 3.25.1; 3.26.0; 3.26.2; 3.27.0; +12 more |
| CVE-2016-1978 | 7.3 | Mar 13 | Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0,… Affected: through 3.20.1 |
Showing 12