# CVEs published 2016-04-01

6 CVEs were published on April 1, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-2289](https://cve.now/CVE-2016-2289.md): Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently disc (no CVSS)
- [CVE-2016-2343](https://cve.now/CVE-2016-2343.md): Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental. (no CVSS)
- [CVE-2016-0793](https://cve.now/CVE-2016-0793.md): Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0. (no CVSS, org.wildfly:wildfly-parent · org.wildfly:wildfly-undertow)
- [CVE-2016-1167](https://cve.now/CVE-2016-1167.md): Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitra (no CVSS)
- [CVE-2016-1168](https://cve.now/CVE-2016-1168.md): Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hij (no CVSS)
- [CVE-2016-1345](https://cve.now/CVE-2016-1345.md): Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass m (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.