# CVEs published 2016-02-13

14 CVEs were published on February 13, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-8629](https://cve.now/CVE-2015-8629.md): The xdr\_nullstring function in lib/kadm5/kadm\_rpc\_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does (no CVSS)
- [CVE-2015-8630](https://cve.now/CVE-2015-8630.md): The (1) kadm5\_create\_principal\_3 and (2) kadm5\_modify\_principal functions in lib/kadm5/srv/svr\_principal.c in kadmind in MIT Kerberos 5 (aka (no CVSS)
- [CVE-2015-8631](https://cve.now/CVE-2015-8631.md): Multiple memory leaks in kadmin/server/server\_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow r (no CVSS)
- [CVE-2016-0863](https://cve.now/CVE-2016-0863.md): Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, an (no CVSS)
- [CVE-2016-0864](https://cve.now/CVE-2016-0864.md): Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain (no CVSS)
- [CVE-2016-0865](https://cve.now/CVE-2016-0865.md): Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users (no CVSS)
- [CVE-2016-0866](https://cve.now/CVE-2016-0866.md): Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 (no CVSS)
- [CVE-2016-1521](https://cve.now/CVE-2016-1521.md): The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x (no CVSS)
- [CVE-2016-1522](https://cve.now/CVE-2016-1522.md): Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider re (no CVSS)
- [CVE-2016-1523](https://cve.now/CVE-2016-1523.md): The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR (no CVSS)
- [CVE-2016-1524](https://cve.now/CVE-2016-1524.md): Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute (no CVSS)
- [CVE-2016-1525](https://cve.now/CVE-2016-1525.md): Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticat (no CVSS)
- [CVE-2016-1526](https://cve.now/CVE-2016-1526.md): The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38 (no CVSS)
- [CVE-2016-1949](https://cve.now/CVE-2016-1949.md): Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.