NS
Product
Network Security Services
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 12Medium 8Low 1
Watch
Add Network Security Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18508 | 6.5 | Oct 22 | In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service Affected: before 3.36.7; 3.41 before 3.41.1 |
| CVE-2018-12404 | 5.9 | May 2 | A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content Affected: before 3.41 |
| CVE-2018-12384 | 5.9 | Apr 29 | When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead Affected: before 3.39 |
| CVE-2016-8635 | 5.9 | Aug 1 | It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack Affected: 3.21 through 3.21.4 |
| CVE-2016-9574 | 5.9 | Jul 19 | nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA Affected: before 3.30 |
| CVE-2015-7575 | 5.9 | Jan 9 | Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key… Affected: through 3.20.1 |
| CVE-2009-2408 | 5.9 | Jul 30 | Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a… Affected: before 3.12.3 |
| CVE-2017-5462 | 5.3 | Jun 11 | A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over Affected: before 3.28.4 |
Showing 8