Mod Nss Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mod Nss Project records in CISA KEV

No Mod Nss Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mod Nss 4 records MEDIUM

Records

4 records in Mod Nss · all components

TI-2015-04404 CVE-2015-5244 · GHSA-f93f-jh28-5ffr

The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows…

MEDIUM 47

The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02749 Published 2017-08-07 No fix listed CWE-264

TI-2011-04281 CVE-2011-4973 · GHSA-mmjq-r7xw-fqr8

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume…

MEDIUM 44

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00999 Published 2018-02-15 Partial fix CWE-287

TI-2015-02898 CVE-2015-3277 · GHSA-q69f-3429-57w3

The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists…

LOW 38

The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of multi-keyword cipherstring.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0253 Published 2017-08-09 No fix listed CWE-200

TI-2013-04011 CVE-2013-4566 · GHSA-c4hv-94wj-93p7

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost…

LOW 23

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.01949 Published 2013-12-12 Partial fix CWE-264

Open these records in search →

Critical	2
High	1
Medium	1
Low	0
No CVSS	0