[{"CVE":"CVE-2019-11745","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0243","RHSA-2019:4190","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:4114","RHSA-2020:1461","RHSA-2019:4152","RHSA-2020:0466"],"bugzilla":"1774831","bugzilla_description":"CVE-2019-11745 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["nss-0:3.44.0-8.el8_0","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-7.el7_7","nss-softokn-0:3.14.3-23.el6_6","nss-0:3.44.0-9.el8_1","nss-softokn-0:3.44.0-6.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-7781","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479197","bugzilla_description":"CVE-2017-7781 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-1938","severity":"low","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1305159","bugzilla_description":"CVE-2016-1938 Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1938.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2730","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1699"],"bugzilla":"1236954","bugzilla_description":"CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-347","affected_packages":["nss-0:3.19.1-1.el5_11","nss-softokn-0:3.16.2.3-13.el7_1","nss-softokn-0:3.14.3-23.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2730.json"}]