# CVEs published 2016-02-07

20 CVEs were published on February 7, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6398](https://cve.now/CVE-2015-6398.md): Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a deni (no CVSS)
- [CVE-2016-1301](https://cve.now/CVE-2016-1301.md): The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software (no CVSS)
- [CVE-2016-1302](https://cve.now/CVE-2016-1302.md): Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mod (no CVSS)
- [CVE-2016-1305](https://cve.now/CVE-2016-1305.md): Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote (no CVSS)
- [CVE-2016-1307](https://cve.now/CVE-2016-1307.md): The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which m (no CVSS)
- [CVE-2016-1308](https://cve.now/CVE-2016-1308.md): SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary S (no CVSS)
- [CVE-2016-1309](https://cve.now/CVE-2016-1309.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2016-0801](https://cve.now/CVE-2016-0801.md): The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attack (no CVSS)
- [CVE-2016-0802](https://cve.now/CVE-2016-0802.md): The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attack (no CVSS)
- [CVE-2016-0803](https://cve.now/CVE-2016-0803.md): libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to exe (no CVSS)
- [CVE-2016-0804](https://cve.now/CVE-2016-0804.md): The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in A (no CVSS)
- [CVE-2016-0805](https://cve.now/CVE-2016-0805.md): The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 al (no CVSS)
- [CVE-2016-0806](https://cve.now/CVE-2016-0806.md): The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to (no CVSS)
- [CVE-2016-0807](https://cve.now/CVE-2016-0807.md): The get\_build\_id function in elf\_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted a (no CVSS)
- [CVE-2016-0808](https://cve.now/CVE-2016-0808.md): Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x b (no CVSS)
- [CVE-2016-0809](https://cve.now/CVE-2016-0809.md): Use-after-free vulnerability in the wifi\_cleanup function in bcmdhd/wifi\_hal/wifi\_hal.cpp in Wi-Fi in Android 6.x before 2016-02-01 allows a (no CVSS)
- [CVE-2016-0810](https://cve.now/CVE-2016-0810.md): media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locki (no CVSS)
- [CVE-2016-0811](https://cve.now/CVE-2016-0811.md): Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-0 (no CVSS)
- [CVE-2016-0812](https://cve.now/CVE-2016-0812.md): The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android (no CVSS)
- [CVE-2016-0813](https://cve.now/CVE-2016-0813.md): packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.