[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIT7Kcq8G5gp1UZuzre7k4bARnPM4mltbIxVtwDWVXOg":3,"g5a-risk:CVE-2016-1954":342},{"success":4,"data":5,"meta":340},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":118,"references":119,"referencesCount":246,"weaknesses":247,"weaknessesCount":251,"isActivelyExploited":252,"cisaInfo":15,"otxData":15,"relatedBlogPosts":253,"seoMetadata":254,"configurations":279,"relatedVendorCves":338,"notableEvents":339},"CVE-2016-1954","What is CVE-2016-1954?","The nsCSPContext::SendReports function in dom\u002Fsecurity\u002FnsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.","The nsCSPContext::SendReports function in dom\u002Fsecurity\u002FnsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use ...","2016-03-13T18:59:03.6","2025-04-12T10:46:40.837",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.02331,[40,40,40,40,40,40,40],"High",[44,49,52,55,58,61,64,67,70,73,76,79,82,85,88,91,96,101,104,107,112,115],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"mozilla","firefox","*","cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"38.0","cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"38.0.1","cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":56,"criteria":57,"vulnerable":4},"38.0.5","cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":59,"criteria":60,"vulnerable":4},"38.1.0","cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":62,"criteria":63,"vulnerable":4},"38.1.1","cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":65,"criteria":66,"vulnerable":4},"38.2.0","cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":68,"criteria":69,"vulnerable":4},"38.2.1","cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":71,"criteria":72,"vulnerable":4},"38.3.0","cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":74,"criteria":75,"vulnerable":4},"38.4.0","cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":77,"criteria":78,"vulnerable":4},"38.5.0","cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":80,"criteria":81,"vulnerable":4},"38.5.1","cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":83,"criteria":84,"vulnerable":4},"38.6.0","cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":86,"criteria":87,"vulnerable":4},"38.6.1","cpe:2.3:a:mozilla:firefox:38.6.1:*:*:*:*:*:*:*",{"vendor":45,"product":89,"version":47,"criteria":90,"vulnerable":4},"thunderbird","cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",{"vendor":92,"product":93,"version":94,"criteria":95,"vulnerable":4},"novell","suse_package_hub_for_suse_linux_enterprise","12","cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*",{"vendor":97,"product":98,"version":99,"criteria":100,"vulnerable":4},"opensuse","leap","42.1","cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",{"vendor":97,"product":97,"version":102,"criteria":103,"vulnerable":4},"13.1","cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",{"vendor":97,"product":97,"version":105,"criteria":106,"vulnerable":4},"13.2","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":110,"criteria":111,"vulnerable":4},"oracle","linux","5.0","cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":113,"criteria":114,"vulnerable":4},"6","cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":116,"criteria":117,"vulnerable":4},"7","cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*",22,[120,126,130,133,136,139,142,145,149,152,155,158,161,165,168,172,176,180,184,187,190,193,196,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244],{"url":121,"source":122,"tags":123},"http:\u002F\u002Fhg.mozilla.org\u002Freleases\u002Fmozilla-release\u002Frev\u002F5154bb929236","Mozilla",[124,125],"Issue Tracking","Patch",{"url":127,"source":128,"tags":129},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00027.html","Opensuse",[],{"url":131,"source":128,"tags":132},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00029.html",[],{"url":134,"source":128,"tags":135},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00031.html",[],{"url":137,"source":128,"tags":138},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00050.html",[],{"url":140,"source":128,"tags":141},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00068.html",[],{"url":143,"source":128,"tags":144},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00089.html",[],{"url":146,"source":128,"tags":147},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00091.html",[148],"Third Party Advisory",{"url":150,"source":128,"tags":151},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00093.html",[],{"url":153,"source":128,"tags":154},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00006.html",[148],{"url":156,"source":128,"tags":157},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00007.html",[148],{"url":159,"source":128,"tags":160},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00008.html",[148],{"url":162,"source":163,"tags":164},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3510","Debian",[],{"url":166,"source":163,"tags":167},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3520",[],{"url":169,"source":122,"tags":170},"http:\u002F\u002Fwww.mozilla.org\u002Fsecurity\u002Fannounce\u002F2016\u002Fmfsa2016-17.html",[171],"Vendor Advisory",{"url":173,"source":174,"tags":175},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Flinuxbulletinjan2016-2867209.html","Oracle",[148],{"url":177,"source":178,"tags":179},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1035215","Securitytracker",[],{"url":181,"source":182,"tags":183},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-1","Ubuntu",[],{"url":185,"source":182,"tags":186},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-2",[],{"url":188,"source":182,"tags":189},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-3",[],{"url":191,"source":182,"tags":192},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2934-1",[],{"url":194,"source":122,"tags":195},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=1243178",[124],{"url":197,"source":198,"tags":199},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201605-06","Gentoo",[],{"url":121,"source":122,"tags":201},[124,125],{"url":127,"source":128,"tags":203},[],{"url":131,"source":128,"tags":205},[],{"url":134,"source":128,"tags":207},[],{"url":137,"source":128,"tags":209},[],{"url":140,"source":128,"tags":211},[],{"url":143,"source":128,"tags":213},[],{"url":146,"source":128,"tags":215},[148],{"url":150,"source":128,"tags":217},[],{"url":153,"source":128,"tags":219},[148],{"url":156,"source":128,"tags":221},[148],{"url":159,"source":128,"tags":223},[148],{"url":162,"source":163,"tags":225},[],{"url":166,"source":163,"tags":227},[],{"url":169,"source":122,"tags":229},[171],{"url":173,"source":174,"tags":231},[148],{"url":177,"source":178,"tags":233},[],{"url":181,"source":182,"tags":235},[],{"url":185,"source":182,"tags":237},[],{"url":188,"source":182,"tags":239},[],{"url":191,"source":182,"tags":241},[],{"url":194,"source":122,"tags":243},[124],{"url":197,"source":198,"tags":245},[],46,[248],{"id":249,"name":249,"description":250},"Unknown","CWE-264",1,false,[],{"title":255,"metaDescription":256,"keywords":257,"canonicalUrl":258,"structuredData":259},"What is CVE-2016-1954? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-1954, a high severity cyber security vulnerability from 2016. The nsCSPContext::SendReports function in dom\u002Fsecurity\u002FnsCSP...","CVE-2016-1954, CVE-2016-1954 vulnerability, CVE-2016-1954 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, mozilla security, firefox vulnerability","\u002Fwhat-is\u002Fcve-2016-1954",{"@context":260,"@type":261,"headline":255,"description":256,"datePublished":10,"dateModified":11,"author":262,"publisher":266,"about":270,"mainEntityOfPage":274,"articleSection":277,"keywords":278},"https:\u002F\u002Fschema.org","TechArticle",{"@type":263,"name":264,"url":265},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":263,"name":264,"url":265,"logo":267},{"@type":268,"url":269},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":271,"name":6,"description":272,"additionalType":273},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":275,"@id":276},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-1954","Cybersecurity","CVE-2016-1954, CVE-2016-1954 vulnerability, CVE-2016-1954 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[280,316,328],{"Operator":15,"Negate":15,"Nodes":281},[282],{"Operator":283,"Negate":15,"CPEMatch":284},"OR",[285,288,290,292,294,296,298,300,302,304,306,308,310,312,314],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":286,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":287},"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE","44.0.2",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":289,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"35BF0AFB-26BA-4BEA-B6B8-11CF88E951DE",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":291,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1F007CC6-9391-4E1C-A747-F3DE5E572FA5",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":293,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"45E9641F-430C-4B3A-BD63-EC13DBD3D1E4",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":295,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5AADD23B-A8AF-4679-990D-C29A1D6EB5CD",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":297,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1343A1FD-98CF-4A6C-A697-1253E538FD5C",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":299,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6D098567-B55E-4EAC-8FAA-31FAFDD4058F",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":301,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BE0389BC-D295-4957-8AE7-EDAC770F596D",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":303,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E75E69A5-AC94-4F35-9EFB-1BFF8B78210D",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":305,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2765E663-C9CF-476A-B7A8-6F02D0E2D72D",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":307,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"62B4E871-0ACB-4EC5-8392-EAD0DF25E64B",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":309,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"435D6EF5-C879-4121-9D47-EF2236E53409",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":311,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A5963D11-D2F4-40A7-81CE-E034C91FCCBD",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":313,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5FB022A7-B792-4AC0-B2CF-AF6F384AE719",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":315,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":83},"525474B4-A489-41FA-8E97-CB9C7F87C524",{"Operator":15,"Negate":15,"Nodes":317},[318],{"Operator":283,"Negate":15,"CPEMatch":319},[320,322,324,326],{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":321,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5BEF8F1-A70F-455C-BFDD-09E0A658F702",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":323,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4863BE36-D16A-4D75-90D9-FD76DB5B48B7",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":325,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A10BC294-9196-425F-9FB0-B1625465B47F",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":327,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"03117DF1-3BEC-4B8D-AD63-DBBDB2126081",{"Operator":15,"Negate":15,"Nodes":329},[330],{"Operator":283,"Negate":15,"CPEMatch":331},[332,334,336],{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":333,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E3CCD459-9E6D-4731-8054-CDF8B58454A9",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":335,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"CC7A498A-A669-4C42-8134-86103C799D13",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":337,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"104DA87B-DEE4-4262-AE50-8E6BC43B228B",[],[],{"lastModified":11,"cacheTime":341,"version":33},1792353142431,{"score":343,"band":344,"action":345,"scoredAt":346},47,"Medium","Plan remediation","2026-10-17T07:56:36.219506+00:00"]