Skip to content
OpenAdvisories

Archive

1 April 2016

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —

    Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obt…

  • Unscored —

    Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, …

  • High 7.5
    CVE-2016-0793 Public exploit EPSS 15%

    WildFly has incomplete blacklist vulnerability

    Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows re…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the auth…

  • Unscored —

    Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote …