<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: mod nss</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2011-4973: Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid</title><link>https://patchthecve.com/cve/CVE-2011-4973.html</link><guid>https://patchthecve.com/cve/CVE-2011-4973.html</guid><pubDate>Tue, 16 Jun 2026 23:35:45 +0000</pubDate><description>CRITICAL 9.8: Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering &#x27;password&#x27; as the password.</description></item><item><title>CVE-2015-3277: The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect par</title><link>https://patchthecve.com/cve/CVE-2015-3277.html</link><guid>https://patchthecve.com/cve/CVE-2015-3277.html</guid><pubDate>Wed, 17 Jun 2026 00:25:39 +0000</pubDate><description>HIGH 7.5: The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of multi-keyword cipherstring.</description></item><item><title>CVE-2015-5244: The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass</title><link>https://patchthecve.com/cve/CVE-2015-5244.html</link><guid>https://patchthecve.com/cve/CVE-2015-5244.html</guid><pubDate>Wed, 17 Jun 2026 00:28:44 +0000</pubDate><description>CRITICAL 9.8: The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.</description></item></channel></rss>