McAfee, LCC Security Vulnerabilities

CVE-2023-2522

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=access_detect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat...

Path traversal

A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack can be initiated remotely. The exploit.....

Command injection

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=access_detect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat...

Compliance joins Microsoft Intelligent Security Association (MISA)

Like many of you, I’m thrilled to have my 2020 calendar safely in the recycling pile. During that time though, you too might have noticed how, perhaps unknowingly, you were able to turn some of last year’s lemons into lemonade. Maybe you developed a deeper appreciation for everyday moments and the....

Security fix for the ALT Linux 8 package php7 version 7.2.14-alt1

7.2.14-alt1 built Jan. 23, 2019 Anton Farygin in task #219433 Jan. 15, 2019 Anton Farygin - 7.2.14 (fixes: CVE-2018-19935) - removed the .a archive from php7-mysqlnd package (closes: #34521 ) - E2K: worked around the lack of gcc5's builtins in lcc-1.23...

Security fix for the ALT Linux 10 package php8.0 version Jan.

Jan. 15, 2019 Anton Farygin 7.2.14-alt1 - 7.2.14 (fixes: CVE-2018-19935) - removed the .a archive from php7-mysqlnd package (closes: #34521 ) - E2K: worked around the lack of gcc5's builtins in lcc-1.23 (closes:...

longviewlibrary.org XSS vulnerability

Vulnerable URL: http://www.longviewlibrary.org:8080/ipac20/ipac.jsp?profile=lcc&uri;=link=3100020~!52804~!3100001~!3100002&aspect;='}alert('OPENBUGBOUNTY')-function(){%2F%2F Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability.....

Threat Outbreak Alert RuleID22783: Email Messages Distributing Malicious Software on May 10, 2016

Medium Alert ID: 45110 First Published: 2016 May 10 15:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat (RuleID22783) may contain the following...

Invision Gallery <= 2.0.7 ReadFile() & SQL Injection Exploit

No description provided by...