Skip to content
OpenAdvisories

Archive

24 September 2016

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Govern…

  • Unscored —
    CVE-2016-4845 Public exploit

    Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0,…

  • Critical 9.8

    Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrativ…

  • Unscored —

    DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrat…

  • Unscored —

    Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privilege…

  • Unscored —

    The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is …

  • Unscored —

    Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 cert…

  • Unscored —

    The Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote…

  • Unscored —

    Cisco Prime Home 5.2.0 allows remote attackers to read arbitrary files via an XML document containing an external entit…

  • Unscored —

    The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is …

  • Unscored —

    The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles bina…