[{"CVE":"CVE-2020-6829","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1826187","bugzilla_description":"CVE-2020-6829 nss: Side channel attack on ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12402","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1826231","bugzilla_description":"CVE-2020-12402 nss: Side channel vulnerabilities during RSA key generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-11719","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1728436","bugzilla_description":"CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]