Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2015-3277

mod_nss: incorrect multi-keyword mode cipherstring parsing

The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of multi-keyword cipherstring.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Mod Nss Project
Products
Mod Nss
CVE-2015-5244

mod_nss: incorrect ciphersuite parsing

The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Mod Nss Project
Products
Mod Nss
CVE-2013-4566

mod_nss: incorrect handling of NSSVerifyClient in directory context

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

CVSS 2.0 · 4.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Mod Nss Project Redhat
Products
Mod Nss Enterprise Linux
CVE-2011-4973

mod_nss: FakeBasicAuth authentication bypass

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

CVSS 3.0 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Mod Nss Project Redhat
Products
Mod Nss Enterprise Linux