Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductNetwork Security Services (4393dd94-659d-5c94-8f09-87796249e528)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/nss-dev/nss purl2cpe 2026-06-01 10:17:53.216802
pkg:mozilla/nss purl2cpe 2026-06-01 10:17:53.216804
pkg:rpm/opensuse/mozilla-nss purl2cpe 2026-06-01 10:17:53.216805

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3479 vulnerable 2026-06-08 05:48:21.153861 Details available
A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can lead us to a segmentation fault or crash.
Published: 2022-10-14T00:00:00.000Z
Updated: 2024-11-20T16:21:14.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25648 vulnerable 2026-06-08 05:22:37.027606 Details available
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
Published: 2020-10-20T00:00:00.000Z
Updated: 2024-08-04T15:40:36.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17007 vulnerable 2026-06-08 05:13:09.762681 Details available
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
Published: 2020-10-22T20:28:17.000Z
Updated: 2024-08-05T01:24:48.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17006 vulnerable 2026-06-08 05:13:09.760084 Details available
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
Published: 2020-10-22T20:24:25.000Z
Updated: 2024-08-05T01:24:48.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18508 vulnerable 2026-06-08 05:11:14.181538 Details available
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
Published: 2020-10-22T20:14:42.000Z
Updated: 2024-08-05T11:08:22.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12404 vulnerable 2026-06-08 05:10:41.496551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12384 vulnerable 2026-06-08 05:10:41.459782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5462 vulnerable 2026-06-08 05:09:46.947540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5461 vulnerable 2026-06-08 05:09:46.946827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9574 vulnerable 2026-06-08 05:08:24.044537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8635 vulnerable 2026-06-08 05:08:14.514720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5285 vulnerable 2026-06-08 05:07:56.589740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2834 vulnerable 2026-06-08 05:07:43.245366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1979 vulnerable 2026-06-08 05:07:32.452920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1978 vulnerable 2026-06-08 05:07:32.452202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7575 vulnerable 2026-06-08 05:07:01.409503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7183 vulnerable 2026-06-08 05:07:00.091028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7182 vulnerable 2026-06-08 05:07:00.089260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7181 vulnerable 2026-06-08 05:07:00.081890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2730 vulnerable 2026-06-08 05:06:35.649302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1569 vulnerable 2026-06-08 05:05:25.564814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1568 vulnerable 2026-06-08 05:05:25.462579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1492 vulnerable 2026-06-08 05:05:24.997877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1491 vulnerable 2026-06-08 05:05:24.992360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1490 vulnerable 2026-06-08 05:05:24.987419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1740 vulnerable 2026-06-08 05:03:56.036195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1739 vulnerable 2026-06-08 05:03:55.976758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1620 vulnerable 2026-06-08 05:03:55.026281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0791 vulnerable 2026-06-08 05:03:50.099859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0441 vulnerable 2026-06-08 05:00:42.454135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2409 vulnerable 2026-06-08 04:51:28.280005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2408 vulnerable 2026-06-08 04:51:28.239337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0009 vulnerable 2026-06-08 04:49:31.112241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4340 vulnerable 2026-06-08 04:49:17.641283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.