Vulnerabilities (CVE)

Filtered by vendor Mod Nss Project Subscribe
Filtered by product Mod Nss
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-4973 1 Mod Nss Project 1 Mod Nss 2018-03-15 7.5 HIGH 9.8 CRITICAL
Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.
CVE-2015-5244 1 Mod Nss Project 1 Mod Nss 2017-08-16 7.5 HIGH 9.8 CRITICAL
The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.