# CVEs published 2016-09-24

11 CVEs were published on September 24, 2016: 1 critical, 0 high. Days are UTC.

- [CVE-2016-0918](https://cve.now/CVE-2016-0918.md): EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 (no CVSS)
- [CVE-2016-4845](https://cve.now/CVE-2016-4845.md): Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0 (no CVSS)
- [CVE-2016-5793](https://cve.now/CVE-2016-5793.md): Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse (no CVSS)
- [CVE-2016-6531](https://cve.now/CVE-2016-6531.md): Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveragin (CVSS 9.8)
- [CVE-2016-6532](https://cve.now/CVE-2016-6532.md): DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrative access by enterin (no CVSS)
- [CVE-2016-6408](https://cve.now/CVE-2016-6408.md): Cisco Prime Home 5.2.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conj (no CVSS)
- [CVE-2016-6409](https://cve.now/CVE-2016-6409.md): The Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a (no CVSS)
- [CVE-2016-6410](https://cve.now/CVE-2016-6410.md): The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remot (no CVSS)
- [CVE-2016-6411](https://cve.now/CVE-2016-6411.md): Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allow (no CVSS)
- [CVE-2016-6412](https://cve.now/CVE-2016-6412.md): The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-i (no CVSS)
- [CVE-2016-6413](https://cve.now/CVE-2016-6413.md): The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles binary files, which allow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.