Lucene search
+L

2504 matches found

BDU FSTEC
BDU FSTEC
added 2023/08/16 12:00 a.m.11 views

The vulnerability of the modTMSL module in the monitoring and security management panel of Trend Micro Apex Central allows a attacker to perform an SSRF attack.

The vulnerability of the modTMSL module in the monitoring and security management widgets of Trend Micro Apex Central relates to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

9.1CVSS6.3AI score0.00328EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/08/16 12:00 a.m.15 views

The vulnerability of the modTXSOt module in the monitoring and security management widgets of Trend Micro Apex Central allows a attacker to perform an SSRF attack.

The vulnerability of the modTXSO widget in the monitoring panel of the Trend Micro Apex Central security management tool is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

9.1CVSS6.5AI score0.00321EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/08/10 7:04 a.m.21 views

Multiple server-side request forgery vulnerabilities in Trend Micro Apex Central (July 2023)

Overview Trend Micro Apex Central is vulnerable to multiple server-side request forgeries. Trend Micro Incorporated has released Patch 5 build 6481 for Trend Micro Apex Central. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact...

5.4CVSS7.1AI score0.00328EPSS
SaveExploits0References11
Openbugbounty
Openbugbounty
added 2023/08/02 9:13 p.m.19 views

lobby.apexfantasyleagues.com Cross Site Scripting vulnerability OBB-3565945

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/07/26 12:00 a.m.6 views

PT-2023-4351 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to build 6481 Trend Micro Apex Central 2019 version = Build 6394 Description: The issue is related to insufficient validation of incoming requests in the modDeepSecurity widget of the monitoring panel o...

8CVSS5.5AI score0.00321EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2023/07/26 12:00 a.m.7 views

PT-2023-4354 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central version 2019 = Build 6394 Description: The issue is related to insufficient validation of incoming requests in the modTMSL widget monitoring panel module of Trend Micro Apex Central, a security monitoring and manageme...

8CVSS5.3AI score0.00328EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2023/07/26 12:00 a.m.4 views

PT-2023-4352 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to build 6481 Description: A server-side request forgery SSRF vulnerability could allow an attacker to interact with internal or local services directly. The attacker must first obtain the ability to...

8CVSS5.5AI score0.00321EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/07/26 12:00 a.m.6 views

PT-2023-4353 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to build 6481 Description: A server-side request forgery SSRF vulnerability could allow an attacker to interact with internal or local services directly. The attacker must first obtain the ability to...

8CVSS5.5AI score0.00321EPSS
SaveExploits0References9
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:00 a.m.17 views

Trend Micro Apex Central modVulnerabilityProtect Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the modVulnerabilityProtect module. The issue results from the lack of prop...

9.1CVSS6.2AI score0.00321EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:00 a.m.37 views

Trend Micro Apex Central modDeepSecurity Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the modDeepSecurity module. The issue results from the lack of proper...

9.1CVSS6.2AI score0.00321EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:00 a.m.21 views

Trend Micro Apex Central modTXSO Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the modTXSO module. The issue results from the lack of proper validation of...

9.1CVSS6.2AI score0.00321EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.11 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...

6.4CVSS7.1AI score0.01873EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:00 a.m.16 views

Trend Micro Apex Central modTMSL Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the modTMSL module. The issue results from the lack of proper validation of...

9.1CVSS6.2AI score0.00328EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.11 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...

6.4CVSS7.1AI score0.01873EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.9 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...

6.4CVSS7.1AI score0.01873EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.9 views

The vulnerability of the monitoring panel widgets of the Trend Micro Apex Central security management and monitoring tool allows a threat actor to execute arbitrary code.

The vulnerability of the monitoring panel of the security monitoring and management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created...

6.4CVSS7.1AI score0.00683EPSS
SaveExploits0References4
OSV
OSV
added 2023/07/18 9:15 p.m.10 views

CVE-2023-21974

Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express component: User Account. Supported versions that are affected are Application Express Team Calendar Plugin: 18.2-22.1. Easily exploitable vulnerability allows low privileged attacker with network...

9CVSS7.3AI score0.00611EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/18 9:15 p.m.24 views

CVE-2023-21974

Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express component: User Account. Supported versions that are affected are Application Express Team Calendar Plugin: 18.2-22.1. Easily exploitable vulnerability allows low privileged attacker with network...

9CVSS0.00611EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/06/29 12:00 a.m.41 views

Unspecified vulnerability in Trend Micro Apex One (CNVD-2023-65415)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One has a security vulnerability that can be exploited by local attackers to obtain sensitive information...

5.5CVSS6.4AI score0.00286EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/06/29 12:00 a.m.54 views

Unspecified vulnerability in Trend Micro Apex One (CNVD-2023-65416)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One has a security vulnerability that can be exploited by a local attacker to elevate privileges...

7CVSS6.6AI score0.00184EPSS
SaveExploits0References1
Rows per page
Query Builder