VYPR

Iplanet Web Proxy Server

Sign in to watch

by Oracle Corporation

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2016-1950Hig0.578.80.02Mar 13, 2016Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.
CVE-2013-16200.000.01Feb 8, 2013The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.