https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:26:09 +0000 https://vulnerability.circl.lu/vuln/cve-2015-0799 <p>The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.</p> <p>The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.</p> https://vulnerability.circl.lu/vuln/cve-2015-0799 https://vulnerability.circl.lu/vuln/usn-2557-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Muneaki Nishimura discovered a flaw in Mozilla&#39;s HTTP Alternative Services implementation which meant SSL certificate verification could be bypassed in some circumstances. A remote attacker could potentially exploit this to conduct a machine-in-the-middle attack. (CVE-2015-0799)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Muneaki Nishimura discovered a flaw in Mozilla&#39;s HTTP Alternative Services implementation which meant SSL certificate verification could be bypassed in some circumstances. A remote attacker could potentially exploit this to conduct a machine-in-the-middle attack. (CVE-2015-0799)</p> https://vulnerability.circl.lu/vuln/usn-2557-1