Filtered by vendor Mod Nss Project Subscriptions
Filtered by product Mod Nss Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-4566 2 Mod Nss Project, Redhat 2 Mod Nss, Enterprise Linux 2019-04-22 N/A
mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.
CVE-2011-4973 1 Mod Nss Project 1 Mod Nss 2018-03-15 N/A
Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.
CVE-2015-3277 1 Mod Nss Project 1 Mod Nss 2017-08-21 N/A
The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of multi-keyword cipherstring.
CVE-2015-5244 1 Mod Nss Project 1 Mod Nss 2017-08-16 N/A
The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.