Login Request a demo
NS
Product
nss
by Mozilla · last CVE Dec 12, 2023
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 3High 1Medium 3Low 0
Severity
All severities7Critical3High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add nss to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-43527
9.8
18%
Dec 8
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures
Affected: before 3.73
CVE-2009-3555
9.8
87%
Nov 9
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and…
Affected: through 3.12.4
CVE-2020-12403
9.1
2%
May 27
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55
Affected: before 3.55
CVE-2016-5285
7.5
2%
Nov 15
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which…
Affected: before 3.26
CVE-2023-4421
6.5
1%
Dec 12
The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks
Affected: before 3.6.1
CVE-2016-1938
6.5
3%
Jan 31
The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which…
Affected: through 3.20.1
CVE-2016-8635
5.9
2%
Aug 1
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack
Affected: 3.21.x
Showing 7