108 matches found
CVE-2018-15365
Deep Discovery Inspector 3.8 における反射型 XSS Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165 の管理用 Web インターフェイスに、反射型 XSS 脆弱性を発見しました。 脆弱なスクリプトのパスは /php/detectiondetailfilter.php です。このスクリプトは認証されたユーザーのみアクセス可能ですが、後述の攻撃シナリオを考慮すると、このことが脆弱性の深刻さを軽減するわけではありません。 以下の POST リクエストペイロードは JavaScript...
EUVD-2015-2960
Malware in sbrugna...
EUVD-2015-2961
Malware in sbrugna...
EUVD-2017-3006
Malware in sbrugna...
EUVD-2018-7243
Malware in sbrugna...
EUVD-2017-3007
Malware in sbrugna...
EUVD-2024-42144
Malicious code in bioql PyPI...
EUVD-2024-42143
Malicious code in bioql PyPI...
CVE-2024-46902
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code admin user rights on the target system in ord...
CVE-2024-46903
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2024-46902
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code admin user rights on the target system in ord...
CVE-2024-46903
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2024-46902
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code admin user rights on the target system in ord...
CVE-2024-46903
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2024-46903
Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above are affected by a SQL injection-related information disclosure vulnerability (CVE-2024-46903). The issue resides in the web service that processes inputs and leads to unauthorized disclosure of sensitive installation data. Exploita...
CVE-2024-46903
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2024-46902
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code admin user rights on the target system in ord...
CVE-2024-46902
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code admin user rights on the target system in ord...
CVE-2024-46902
Affected product: Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above. The issue is described as a SQL injection vulnerability in the web service that can lead to disclosure of sensitive information in affected installations. Exploitation details in the public docs indicate that aut...
Multiple SQL injection vulnerabilities in Trend Micro Deep Discovery Inspector
Overview Trend Micro Incorporated has released a security update for Trend Micro Deep Discovery Inspector. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Information disclosure due to multiple SQL injection vulnerabilities...