CVE-2015-7575
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not
CVSS
5.9
Medio
EPSS
2.9%
p87
KEV
—
Exploit Today
26
0-100
Publicado: 9 ene 2016 · Última mod.: 14 oct 2026 · CWE-19
2.9%EPSS · 30 días2.9%
2026-09-252026-10-23
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2015-12/msg00139.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2016-01/msg00005.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2016-01/msg00058.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2016-01/msg00059.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2016-02/msg00166.html
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2016-0049.html
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2016-0050.html
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2016-0053.html
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2016-0054.html
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-203117.4 ALT9.6%
——3A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic.
This vulnerability is due to improper handling of crafted Ethernet frames. An attacker could exploit this vulnerability by sending crafted Ethernet frames through an affected switch. A successful exploit could allow the attacker to cause the egress port to which the crafted frame is forwarded to start dropping all frames, resulting in a denial of service (DoS) condition.28dCVE-2015-54777.5 ALT99.9%
KEV—80 ISC BIND Data Processing Errors Vulnerability15dCVE-2014-02276.4 SIN97.6%
——29java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.10d