CVE-2016-4328 (perioperative_information_management_system)

CVE-2016-4328 (perioperative_information_management_system)

MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server.

Source: CVE-2016-4328 (perioperative_information_management_system)

CVE-2016-1420 (application_infrastructure_controller, application_policy_infrastructure_controller_firmware)

CVE-2016-1420 (application_infrastructure_controller, application_policy_infrastructure_controller_firmware)

The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347.

Source: CVE-2016-1420 (application_infrastructure_controller, application_policy_infrastructure_controller_firmware)