# CVEs published 2016-02-12

14 CVEs were published on February 12, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-2073](https://cve.now/CVE-2016-2073.md): The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafte (no CVSS)
- [CVE-2016-2326](https://cve.now/CVE-2016-2326.md): Integer overflow in the asf\_write\_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2016-2327](https://cve.now/CVE-2016-2327.md): libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a d (no CVSS)
- [CVE-2016-2328](https://cve.now/CVE-2016-2328.md): libswscale/swscale\_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denia (no CVSS)
- [CVE-2016-2329](https://cve.now/CVE-2016-2329.md): libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which all (no CVSS)
- [CVE-2016-2330](https://cve.now/CVE-2016-2330.md): libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2016-0881](https://cve.now/CVE-2016-0881.md): EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) (no CVSS)
- [CVE-2016-0882](https://cve.now/CVE-2016-0882.md): EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request (no CVSS)
- [CVE-2016-1315](https://cve.now/CVE-2016-1315.md): The proxy engine in Cisco Advanced Malware Protection (AMP), when used with Email Security Appliance (ESA) 9.5.0-201, 9.6.0-051, and 9.7.0-1 (no CVSS)
- [CVE-2016-1320](https://cve.now/CVE-2016-1320.md): The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator pr (no CVSS)
- [CVE-2016-1322](https://cve.now/CVE-2016-1322.md): The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accoun (no CVSS)
- [CVE-2016-1323](https://cve.now/CVE-2016-1323.md): The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified (no CVSS)
- [CVE-2016-1324](https://cve.now/CVE-2016-1324.md): The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service (resource outage) by accessing an administrat (no CVSS)
- [CVE-2016-1986](https://cve.now/CVE-2016-1986.md): HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, rel (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.