[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIT7Kcq8G5gp1UZuzre7k4bARnPM4mltbIxVtwDWVXOg":3,"g5a-risk:CVE-2016-1954":345},{"success":4,"data":5,"meta":343},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":28,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":122,"references":123,"referencesCount":250,"weaknesses":251,"weaknessesCount":255,"isActivelyExploited":42,"cisaInfo":28,"otxData":28,"relatedBlogPosts":256,"seoMetadata":257,"configurations":282,"relatedVendorCves":341,"notableEvents":342},"CVE-2016-1954","What is CVE-2016-1954?","The nsCSPContext::SendReports function in dom\u002Fsecurity\u002FnsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.","The nsCSPContext::SendReports function in dom\u002Fsecurity\u002FnsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use ...","2016-03-13T18:59:03.6","2026-06-17T00:42:56.103",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":43},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[32],{"Source":18,"Type":19,"CVSSData":33,"BaseSeverity":36,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":42,"ObtainAllPrivilege":42,"ObtainUserPrivilege":42,"ObtainOtherPrivilege":42,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":22,"AccessComplexity":36,"Authentication":24,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":39,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,"",8.6,6.4,false,[],0.02339,[44,44,44,44,44,44,44],"High",[48,53,56,59,62,65,68,71,74,77,80,83,86,89,92,95,100,105,108,111,116,119],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"mozilla","firefox","*","cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"38.0","cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"38.0.1","cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":60,"criteria":61,"vulnerable":4},"38.0.5","cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":63,"criteria":64,"vulnerable":4},"38.1.0","cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":66,"criteria":67,"vulnerable":4},"38.1.1","cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":69,"criteria":70,"vulnerable":4},"38.2.0","cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":72,"criteria":73,"vulnerable":4},"38.2.1","cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":75,"criteria":76,"vulnerable":4},"38.3.0","cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":78,"criteria":79,"vulnerable":4},"38.4.0","cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":81,"criteria":82,"vulnerable":4},"38.5.0","cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":84,"criteria":85,"vulnerable":4},"38.5.1","cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":87,"criteria":88,"vulnerable":4},"38.6.0","cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":90,"criteria":91,"vulnerable":4},"38.6.1","cpe:2.3:a:mozilla:firefox:38.6.1:*:*:*:*:*:*:*",{"vendor":49,"product":93,"version":51,"criteria":94,"vulnerable":4},"thunderbird","cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",{"vendor":96,"product":97,"version":98,"criteria":99,"vulnerable":4},"novell","suse_package_hub_for_suse_linux_enterprise","12","cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*",{"vendor":101,"product":102,"version":103,"criteria":104,"vulnerable":4},"opensuse","leap","42.1","cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",{"vendor":101,"product":101,"version":106,"criteria":107,"vulnerable":4},"13.1","cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",{"vendor":101,"product":101,"version":109,"criteria":110,"vulnerable":4},"13.2","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",{"vendor":112,"product":113,"version":114,"criteria":115,"vulnerable":4},"oracle","linux","5.0","cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*",{"vendor":112,"product":113,"version":117,"criteria":118,"vulnerable":4},"6","cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*",{"vendor":112,"product":113,"version":120,"criteria":121,"vulnerable":4},"7","cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*",22,[124,130,134,137,140,143,146,149,153,156,159,162,165,169,172,176,180,184,188,191,194,197,200,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248],{"url":125,"source":126,"tags":127},"http:\u002F\u002Fhg.mozilla.org\u002Freleases\u002Fmozilla-release\u002Frev\u002F5154bb929236","Mozilla",[128,129],"Issue Tracking","Patch",{"url":131,"source":132,"tags":133},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00027.html","Opensuse",[],{"url":135,"source":132,"tags":136},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00029.html",[],{"url":138,"source":132,"tags":139},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00031.html",[],{"url":141,"source":132,"tags":142},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00050.html",[],{"url":144,"source":132,"tags":145},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00068.html",[],{"url":147,"source":132,"tags":148},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00089.html",[],{"url":150,"source":132,"tags":151},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00091.html",[152],"Third Party Advisory",{"url":154,"source":132,"tags":155},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00093.html",[],{"url":157,"source":132,"tags":158},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00006.html",[152],{"url":160,"source":132,"tags":161},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00007.html",[152],{"url":163,"source":132,"tags":164},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00008.html",[152],{"url":166,"source":167,"tags":168},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3510","Debian",[],{"url":170,"source":167,"tags":171},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3520",[],{"url":173,"source":126,"tags":174},"http:\u002F\u002Fwww.mozilla.org\u002Fsecurity\u002Fannounce\u002F2016\u002Fmfsa2016-17.html",[175],"Vendor Advisory",{"url":177,"source":178,"tags":179},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Flinuxbulletinjan2016-2867209.html","Oracle",[152],{"url":181,"source":182,"tags":183},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1035215","Securitytracker",[],{"url":185,"source":186,"tags":187},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-1","Ubuntu",[],{"url":189,"source":186,"tags":190},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-2",[],{"url":192,"source":186,"tags":193},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-3",[],{"url":195,"source":186,"tags":196},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2934-1",[],{"url":198,"source":126,"tags":199},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=1243178",[128],{"url":201,"source":202,"tags":203},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201605-06","Gentoo",[],{"url":125,"source":126,"tags":205},[128,129],{"url":131,"source":132,"tags":207},[],{"url":135,"source":132,"tags":209},[],{"url":138,"source":132,"tags":211},[],{"url":141,"source":132,"tags":213},[],{"url":144,"source":132,"tags":215},[],{"url":147,"source":132,"tags":217},[],{"url":150,"source":132,"tags":219},[152],{"url":154,"source":132,"tags":221},[],{"url":157,"source":132,"tags":223},[152],{"url":160,"source":132,"tags":225},[152],{"url":163,"source":132,"tags":227},[152],{"url":166,"source":167,"tags":229},[],{"url":170,"source":167,"tags":231},[],{"url":173,"source":126,"tags":233},[175],{"url":177,"source":178,"tags":235},[152],{"url":181,"source":182,"tags":237},[],{"url":185,"source":186,"tags":239},[],{"url":189,"source":186,"tags":241},[],{"url":192,"source":186,"tags":243},[],{"url":195,"source":186,"tags":245},[],{"url":198,"source":126,"tags":247},[128],{"url":201,"source":202,"tags":249},[],46,[252],{"id":253,"name":253,"description":254},"Unknown","CWE-264",1,[],{"title":258,"metaDescription":259,"keywords":260,"canonicalUrl":261,"structuredData":262},"What is CVE-2016-1954? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2016-1954, a high severity cyber security vulnerability from 2016. The nsCSPContext::SendReports function in dom\u002Fsecurity\u002FnsCSP...","CVE-2016-1954, CVE-2016-1954 vulnerability, CVE-2016-1954 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, mozilla security, firefox vulnerability","\u002Fwhat-is\u002Fcve-2016-1954",{"@context":263,"@type":264,"headline":258,"description":259,"datePublished":10,"dateModified":11,"author":265,"publisher":269,"about":273,"mainEntityOfPage":277,"articleSection":280,"keywords":281},"https:\u002F\u002Fschema.org","TechArticle",{"@type":266,"name":267,"url":268},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":266,"name":267,"url":268,"logo":270},{"@type":271,"url":272},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":274,"name":6,"description":275,"additionalType":276},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":278,"@id":279},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2016-1954","Cybersecurity","CVE-2016-1954, CVE-2016-1954 vulnerability, CVE-2016-1954 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[283,319,331],{"Operator":28,"Negate":28,"Nodes":284},[285],{"Operator":286,"Negate":42,"CPEMatch":287},"OR",[288,291,293,295,297,299,301,303,305,307,309,311,313,315,317],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":289,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":290},"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE","44.0.2",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":292,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"35BF0AFB-26BA-4BEA-B6B8-11CF88E951DE",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":294,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1F007CC6-9391-4E1C-A747-F3DE5E572FA5",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":296,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"45E9641F-430C-4B3A-BD63-EC13DBD3D1E4",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":298,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"5AADD23B-A8AF-4679-990D-C29A1D6EB5CD",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":300,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1343A1FD-98CF-4A6C-A697-1253E538FD5C",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":302,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"6D098567-B55E-4EAC-8FAA-31FAFDD4058F",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":304,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BE0389BC-D295-4957-8AE7-EDAC770F596D",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":306,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E75E69A5-AC94-4F35-9EFB-1BFF8B78210D",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":308,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"2765E663-C9CF-476A-B7A8-6F02D0E2D72D",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":310,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"62B4E871-0ACB-4EC5-8392-EAD0DF25E64B",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":312,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"435D6EF5-C879-4121-9D47-EF2236E53409",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":314,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A5963D11-D2F4-40A7-81CE-E034C91FCCBD",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":316,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"5FB022A7-B792-4AC0-B2CF-AF6F384AE719",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":318,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":87},"525474B4-A489-41FA-8E97-CB9C7F87C524",{"Operator":28,"Negate":28,"Nodes":320},[321],{"Operator":286,"Negate":42,"CPEMatch":322},[323,325,327,329],{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":324,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B5BEF8F1-A70F-455C-BFDD-09E0A658F702",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":326,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"4863BE36-D16A-4D75-90D9-FD76DB5B48B7",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":328,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A10BC294-9196-425F-9FB0-B1625465B47F",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":330,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"03117DF1-3BEC-4B8D-AD63-DBBDB2126081",{"Operator":28,"Negate":28,"Nodes":332},[333],{"Operator":286,"Negate":42,"CPEMatch":334},[335,337,339],{"Vulnerable":4,"Criteria":115,"MatchCriteriaID":336,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E3CCD459-9E6D-4731-8054-CDF8B58454A9",{"Vulnerable":4,"Criteria":118,"MatchCriteriaID":338,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CC7A498A-A669-4C42-8134-86103C799D13",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":340,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"104DA87B-DEE4-4262-AE50-8E6BC43B228B",[],[],{"lastModified":11,"cacheTime":344,"version":34},1793208728013,{"score":346,"band":347,"action":348,"scoredAt":349},47,"Medium","Plan remediation","2026-07-01T10:19:46.707831+00:00"]