# CVEs published 2016-02-13

14 CVEs were published on February 13, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-8629](https://cve.now/CVE-2015-8629.md): The xdr\_nullstring function in lib/kadm5/kadm\_rpc\_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1… (no CVSS)
- [CVE-2015-8630](https://cve.now/CVE-2015-8630.md): The (1) kadm5\_create\_principal\_3 and (2) kadm5\_modify\_principal functions in lib/kadm5/srv/svr\_principal.c in kadmind in MIT Kerberos 5… (no CVSS)
- [CVE-2015-8631](https://cve.now/CVE-2015-8631.md): Multiple memory leaks in kadmin/server/server\_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow… (no CVSS)
- [CVE-2016-0863](https://cve.now/CVE-2016-0863.md): Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1… (no CVSS)
- [CVE-2016-0864](https://cve.now/CVE-2016-0864.md): Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to… (no CVSS)
- [CVE-2016-0865](https://cve.now/CVE-2016-0865.md): Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated… (no CVSS)
- [CVE-2016-0866](https://cve.now/CVE-2016-0866.md): Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and… (no CVSS)
- [CVE-2016-1521](https://cve.now/CVE-2016-1521.md): The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR… (no CVSS)
- [CVE-2016-1522](https://cve.now/CVE-2016-1522.md): Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider… (no CVSS)
- [CVE-2016-1523](https://cve.now/CVE-2016-1523.md): The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox… (no CVSS)
- [CVE-2016-1524](https://cve.now/CVE-2016-1524.md): Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to… (no CVSS)
- [CVE-2016-1525](https://cve.now/CVE-2016-1525.md): Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote… (no CVSS)
- [CVE-2016-1526](https://cve.now/CVE-2016-1526.md): The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR… (no CVSS)
- [CVE-2016-1949](https://cve.now/CVE-2016-1949.md): Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.