Lucene search
+L

2502 matches found

OSV
OSV
added 2026/03/18 12:24 p.m.9 views

MAL-2026-1588 Malicious code in @bingads-webui-help/apex.core.v3.min (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87351101634ee5726eaa0ee76ecaec8529226c993a610ea5a2d1b7521778bd5a The package @bingads-webui-help/apex.core.v3.min was found to contain malicious code...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/18 12:24 p.m.10 views

Malicious code in @bingads-webui-help/apex.core.v3.min (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87351101634ee5726eaa0ee76ecaec8529226c993a610ea5a2d1b7521778bd5a The package @bingads-webui-help/apex.core.v3.min was found to contain malicious code...

5.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.11 views

Trend Micro Apex One Security Agent iCore Service Signature Verification Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS6.3AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.15 views

Trend Micro Apex Central Improper Authentication Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the management console. The issue results from incorrect implementation of the...

8.1CVSS6AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.15 views

Trend Micro Apex Central Manual Update Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of URLs in the Manual Update feature. By providing a crafted...

4.4CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:00 a.m.9 views

PT-2026-22846

Trend Micro Apex Central Scheduled Update Server-Side Request Forgery Vulnerability...

5.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.12 views

Trend Micro Apex One Security Agent TmSelfProtect Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS6.3AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.17 views

Trend Micro Apex One Security Agent iCore Service Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS6.3AI score0.00357EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.14 views

Trend Micro Apex Central Improper Authentication Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the management console. The issue results from incorrect implementation of the...

8.1CVSS6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:00 a.m.8 views

PT-2026-22849

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central affected versions not specified Description An improper authentication issue exists in Trend Micro Apex Central that could allow privilege escalation. The issue was discovered by Elias Martinez. Recommendations At the...

5.9AI score
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.14 views

Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Apex One console, which listens on TCP ports 8080 and 4343 by default. The issu...

9.8CVSS6.3AI score0.03811EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.14 views

Trend Micro Apex Central Scheduled Update Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of URLs in the Scheduled Update feature. By providing a crafte...

4.4CVSS5.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.14 views

Trend Micro Apex Central Hub Server Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of hub server URLs. By providing a crafted URL, an attacker ca...

4.4CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:00 a.m.10 views

PT-2026-22848

Trend Micro Apex Central Improper Authentication Privilege Escalation Vulnerability...

5.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.15 views

Trend Micro Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS6.3AI score0.00323EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.14 views

Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Apex One console, which listens on TCP ports 8080 and 4343 by default. The issu...

9.8CVSS6.3AI score0.03754EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.12 views

Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS6.3AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:00 a.m.12 views

PT-2026-22847

Trend Micro Apex Central Manual Update Server-Side Request Forgery Vulnerability...

5.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:00 a.m.17 views

Trend Micro Apex One Virus Scan Engine Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS6.3AI score0.00544EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:00 a.m.15 views

PT-2026-22845

Trend Micro Apex Central Hub Server Server-Side Request Forgery Vulnerability...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder