[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2016-2836":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":68,"aliases":69,"duplicate_of":9,"upstream":70,"downstream":71,"duplicates":110,"related":111,"reserved_at":9,"published_at":121,"modified_at":122,"state":123,"summary":124,"references_raw":133,"kevs":223,"epss":224,"epss_history":227,"metrics":489,"affected":500},"CVE-2016-2836","Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-119","Improper Restriction of Operations within the Bounds of a Memory Buffer","The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","weakness","Stable","Class","High",[20,24,28,32,36,40,44,48,52,56,60,64],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-100","Overflow Buffers",[],{"id":29,"name":30,"techniques":31},"CAPEC-123","Buffer Manipulation",[],{"id":33,"name":34,"techniques":35},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":37,"name":38,"techniques":39},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":41,"name":42,"techniques":43},"CAPEC-42","MIME Conversion",[],{"id":45,"name":46,"techniques":47},"CAPEC-44","Overflow Binary Resource File",[],{"id":49,"name":50,"techniques":51},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":53,"name":54,"techniques":55},"CAPEC-46","Overflow Variables and Tags",[],{"id":57,"name":58,"techniques":59},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":61,"name":62,"techniques":63},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":65,"name":66,"techniques":67},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],[],[],[],[72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108],{"_key":73},"RHSA-2016:1551",{"_key":75},"RHSA-2016:1809",{"_key":77},"OPENSUSE-SU-2024:10071-1",{"_key":79},"SUSE-SU-2016:2061-1",{"_key":81},"SUSE-SU-2016:2131-1",{"_key":83},"SUSE-SU-2016:2195-1",{"_key":85},"OPENSUSE-SU-2016:2253-1",{"_key":87},"OPENSUSE-SU-2016:2254-1",{"_key":89},"OPENSUSE-SU-2024:10230-1",{"_key":91},"DLA-585-1",{"_key":93},"DLA-640-1",{"_key":95},"DSA-3640-1",{"_key":97},"DSA-3686-1",{"_key":99},"MGASA-2016-0278",{"_key":101},"MGASA-2016-0330",{"_key":103},"UBUNTU-CVE-2016-2836",{"_key":105},"USN-3073-1",{"_key":107},"USN-3044-1",{"_key":109},"DEBIAN-CVE-2016-2836",[],[112,113,114,115,116,117,118,119,120],{"_key":77},{"_key":79},{"_key":81},{"_key":83},{"_key":85},{"_key":87},{"_key":89},{"_key":99},{"_key":101},"2016-08-05T01:00:00.000Z","2024-08-05T23:32:21.335Z","Modified",{"cisa_kev":125,"cisa_ransomware":125,"cisa_vendor":9,"epss_severity":126,"epss_score":127,"severity":128,"severity_score":129,"severity_version":130,"severity_source":131,"severity_vector":132,"severity_status":123},false,"low",0.00533,"high",8.8,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",[134,141,146,152,157,163,168,172,176,180,184,188,192,197,201,206,211,215,219],{"url":135,"sources":136,"tags":138},"http://rhn.redhat.com/errata/RHSA-2016-1809.html",[137,131],"cve.org",[139,140],"Vendor Advisory","X Refsource REDHAT",{"url":142,"sources":143,"tags":144},"http://www.debian.org/security/2016/dsa-3640",[137,131],[139,145],"X Refsource DEBIAN",{"url":147,"sources":148,"tags":149},"http://www.securitytracker.com/id/1036508",[137,131],[150,151],"VDB Entry","X Refsource SECTRACK",{"url":153,"sources":154,"tags":155},"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",[137,131],[156],"X Refsource CONFIRM",{"url":158,"sources":159,"tags":160},"https://bugzilla.mozilla.org/show_bug.cgi?id=1257765",[137,131],[156,161,162],"Issue Tracking","Permissions Required",{"url":164,"sources":165,"tags":166},"http://www.ubuntu.com/usn/USN-3044-1",[137,131],[139,167],"X Refsource UBUNTU",{"url":169,"sources":170,"tags":171},"https://bugzilla.mozilla.org/show_bug.cgi?id=1282502",[137,131],[156,161,162],{"url":173,"sources":174,"tags":175},"http://www.mozilla.org/security/announce/2016/mfsa2016-62.html",[137,131],[156,139],{"url":177,"sources":178,"tags":179},"https://bugzilla.mozilla.org/show_bug.cgi?id=1268626",[137,131],[156,161,162],{"url":181,"sources":182,"tags":183},"https://bugzilla.mozilla.org/show_bug.cgi?id=1283823",[137,131],[156,161],{"url":185,"sources":186,"tags":187},"http://rhn.redhat.com/errata/RHSA-2016-1551.html",[137,131],[139,140],{"url":189,"sources":190,"tags":191},"https://bugzilla.mozilla.org/show_bug.cgi?id=1249578",[137,131],[156,161,162],{"url":193,"sources":194,"tags":195},"https://security.gentoo.org/glsa/201701-15",[137,131],[139,196],"X Refsource GENTOO",{"url":198,"sources":199,"tags":200},"https://bugzilla.mozilla.org/show_bug.cgi?id=1258079",[137,131],[156,161,162],{"url":202,"sources":203,"tags":204},"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html",[137,131],[139,205],"X Refsource SUSE",{"url":207,"sources":208,"tags":209},"http://www.securityfocus.com/bid/92261",[137,131],[150,210],"X Refsource BID",{"url":212,"sources":213,"tags":214},"https://bugzilla.mozilla.org/show_bug.cgi?id=1154923",[137,131],[156,161,162],{"url":216,"sources":217,"tags":218},"https://bugzilla.mozilla.org/show_bug.cgi?id=822081",[137,131],[156,161,162],{"url":220,"sources":221,"tags":222},"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html",[137,131],[139,205],[],{"date":225,"score":127,"percentile":226},"2026-06-04",0.67729,[228,232,235,238,241,244,247,250,252,255,258,261,264,267,270,273,276,279,282,285,288,290,293,295,298,301,304,306,309,312,315,318,321,323,326,328,331,334,337,340,343,346,349,351,354,357,360,363,366,368,371,374,377,380,383,386,389,392,395,398,401,404,406,409,412,415,418,421,424,427,430,433,436,439,442,445,448,451,454,457,459,462,465,468,471,474,477,480,483,486],{"date":229,"score":230,"percentile":231},"2025-11-04",0.00567,0.67605,{"date":233,"score":230,"percentile":234},"2025-11-05",0.67586,{"date":236,"score":230,"percentile":237},"2025-11-06",0.67588,{"date":239,"score":230,"percentile":240},"2025-11-07",0.676,{"date":242,"score":230,"percentile":243},"2025-11-08",0.67599,{"date":245,"score":230,"percentile":246},"2025-11-09",0.6759,{"date":248,"score":230,"percentile":249},"2025-11-10",0.6758,{"date":251,"score":230,"percentile":234},"2025-11-11",{"date":253,"score":230,"percentile":254},"2025-11-12",0.67607,{"date":256,"score":230,"percentile":257},"2025-11-13",0.67617,{"date":259,"score":230,"percentile":260},"2025-11-14",0.67624,{"date":262,"score":230,"percentile":263},"2025-11-15",0.67622,{"date":265,"score":230,"percentile":266},"2025-11-16",0.67615,{"date":268,"score":230,"percentile":269},"2025-11-17",0.67609,{"date":271,"score":230,"percentile":272},"2025-11-18",0.65926,{"date":274,"score":230,"percentile":275},"2025-11-19",0.65935,{"date":277,"score":230,"percentile":278},"2025-11-20",0.65929,{"date":280,"score":230,"percentile":281},"2025-11-21",0.67625,{"date":283,"score":230,"percentile":284},"2025-11-22",0.67629,{"date":286,"score":230,"percentile":287},"2025-11-23",0.67619,{"date":289,"score":230,"percentile":254},"2025-11-24",{"date":291,"score":230,"percentile":292},"2025-11-25",0.67616,{"date":294,"score":230,"percentile":260},"2025-11-26",{"date":296,"score":230,"percentile":297},"2025-11-27",0.67627,{"date":299,"score":230,"percentile":300},"2025-11-28",0.67611,{"date":302,"score":230,"percentile":303},"2025-11-29",0.67593,{"date":305,"score":230,"percentile":246},"2025-11-30",{"date":307,"score":230,"percentile":308},"2025-12-01",0.67745,{"date":310,"score":230,"percentile":311},"2025-12-02",0.67752,{"date":313,"score":230,"percentile":314},"2025-12-03",0.6775,{"date":316,"score":230,"percentile":317},"2025-12-04",0.67582,{"date":319,"score":230,"percentile":320},"2025-12-05",0.67596,{"date":322,"score":230,"percentile":240},"2025-12-06",{"date":324,"score":230,"percentile":325},"2025-12-07",0.67595,{"date":327,"score":230,"percentile":243},"2025-12-08",{"date":329,"score":230,"percentile":330},"2025-12-09",0.67631,{"date":332,"score":230,"percentile":333},"2025-12-10",0.67677,{"date":335,"score":230,"percentile":336},"2025-12-11",0.67696,{"date":338,"score":230,"percentile":339},"2025-12-12",0.67722,{"date":341,"score":230,"percentile":342},"2025-12-13",0.67727,{"date":344,"score":230,"percentile":345},"2025-12-14",0.67732,{"date":347,"score":230,"percentile":348},"2025-12-15",0.67728,{"date":350,"score":230,"percentile":345},"2025-12-16",{"date":352,"score":230,"percentile":353},"2025-12-17",0.67744,{"date":355,"score":230,"percentile":356},"2025-12-18",0.67779,{"date":358,"score":230,"percentile":359},"2025-12-19",0.67799,{"date":361,"score":230,"percentile":362},"2025-12-20",0.67798,{"date":364,"score":230,"percentile":365},"2025-12-21",0.67784,{"date":367,"score":230,"percentile":365},"2025-12-22",{"date":369,"score":230,"percentile":370},"2025-12-23",0.67782,{"date":372,"score":230,"percentile":373},"2025-12-24",0.6779,{"date":375,"score":230,"percentile":376},"2025-12-25",0.6782,{"date":378,"score":230,"percentile":379},"2025-12-26",0.67821,{"date":381,"score":230,"percentile":382},"2025-12-27",0.67879,{"date":384,"score":230,"percentile":385},"2025-12-28",0.67794,{"date":387,"score":230,"percentile":388},"2025-12-29",0.67787,{"date":390,"score":230,"percentile":391},"2025-12-30",0.67801,{"date":393,"score":230,"percentile":394},"2025-12-31",0.67819,{"date":396,"score":230,"percentile":397},"2026-01-01",0.67997,{"date":399,"score":230,"percentile":400},"2026-01-02",0.67983,{"date":402,"score":230,"percentile":403},"2026-01-03",0.67984,{"date":405,"score":230,"percentile":394},"2026-01-04",{"date":407,"score":230,"percentile":408},"2026-01-05",0.67807,{"date":410,"score":230,"percentile":411},"2026-01-06",0.67818,{"date":413,"score":230,"percentile":414},"2026-01-07",0.67837,{"date":416,"score":230,"percentile":417},"2026-01-08",0.67852,{"date":419,"score":230,"percentile":420},"2026-01-09",0.67862,{"date":422,"score":230,"percentile":423},"2026-01-10",0.67864,{"date":425,"score":230,"percentile":426},"2026-01-11",0.67858,{"date":428,"score":230,"percentile":429},"2026-01-12",0.67846,{"date":431,"score":230,"percentile":432},"2026-01-13",0.67842,{"date":434,"score":127,"percentile":435},"2026-01-14",0.66784,{"date":437,"score":127,"percentile":438},"2026-01-15",0.66788,{"date":440,"score":127,"percentile":441},"2026-01-16",0.66804,{"date":443,"score":127,"percentile":444},"2026-01-17",0.66793,{"date":446,"score":127,"percentile":447},"2026-01-18",0.66777,{"date":449,"score":127,"percentile":450},"2026-01-19",0.66757,{"date":452,"score":127,"percentile":453},"2026-01-20",0.66771,{"date":455,"score":127,"percentile":456},"2026-01-21",0.66783,{"date":458,"score":127,"percentile":444},"2026-01-22",{"date":460,"score":127,"percentile":461},"2026-01-23",0.66821,{"date":463,"score":127,"percentile":464},"2026-01-24",0.66832,{"date":466,"score":127,"percentile":467},"2026-01-25",0.66801,{"date":469,"score":127,"percentile":470},"2026-01-26",0.6679,{"date":472,"score":127,"percentile":473},"2026-01-27",0.668,{"date":475,"score":127,"percentile":476},"2026-01-28",0.66811,{"date":478,"score":127,"percentile":479},"2026-01-29",0.66814,{"date":481,"score":127,"percentile":482},"2026-01-30",0.66827,{"date":484,"score":127,"percentile":485},"2026-01-31",0.66828,{"date":487,"score":127,"percentile":488},"2026-02-01",0.66976,[490],{"source":131,"cvss_v2_0":491,"cvss_v3_0":496,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":492,"baseSeverity":9,"vectorString":493,"impactScore":494,"exploitabilityScore":495},6.8,"AV:N/AC:M/Au:N/C:P/I:P/A:P",6.4,8.6,{"baseScore":129,"baseSeverity":497,"vectorString":132,"impactScore":498,"exploitabilityScore":499},"HIGH",9.8,7.2,[501],{"ecosystem":9,"name":502,"vendor":503,"product":502,"cpe_part":504,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":505},"firefox","mozilla","a",[506,512,514,516,518],{"version":507,"is_range":508,"range_type":509,"version_start":9,"version_start_type":9,"version_end":510,"version_end_type":511,"fixed_in":9},"lte47.0.1",true,"cpe","47.0.1","including",{"version":513,"is_range":125,"range_type":509,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"45.1.0",{"version":515,"is_range":125,"range_type":509,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"45.1.1",{"version":517,"is_range":125,"range_type":509,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"45.2.0",{"version":519,"is_range":125,"range_type":509,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"45.3.0"]