# CVEs published 2016-09-24

11 CVEs were published on September 24, 2016: 1 critical, 0 high. Days are UTC.

- [CVE-2016-0918](https://cve.now/CVE-2016-0918.md): EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0… (no CVSS)
- [CVE-2016-4845](https://cve.now/CVE-2016-4845.md): Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0… (no CVSS)
- [CVE-2016-5793](https://cve.now/CVE-2016-5793.md): Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan… (no CVSS)
- [CVE-2016-6531](https://cve.now/CVE-2016-6531.md): Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by… (CVSS 9.8)
- [CVE-2016-6532](https://cve.now/CVE-2016-6532.md): DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrative access by… (no CVSS)
- [CVE-2016-6408](https://cve.now/CVE-2016-6408.md): Cisco Prime Home 5.2.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in… (no CVSS)
- [CVE-2016-6409](https://cve.now/CVE-2016-6409.md): The Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause… (no CVSS)
- [CVE-2016-6410](https://cve.now/CVE-2016-6410.md): The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows… (no CVSS)
- [CVE-2016-6411](https://cve.now/CVE-2016-6411.md): Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which… (no CVSS)
- [CVE-2016-6412](https://cve.now/CVE-2016-6412.md): The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows… (no CVSS)
- [CVE-2016-6413](https://cve.now/CVE-2016-6413.md): The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles binary files, which… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.