305 matches found
PT-2018-9842
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A SQL injection remote code execution issue exists due to a flaw in the formRequestDomains class, allowing an attacker to execute arbitrary SQL statements on vulnerable...
PT-2018-9838
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A flaw in the formConfiguration class could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations. Authentication is required to exploit this issu...
PT-2018-9839
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A SQL injection information disclosure issue exists due to a flaw in the formChangePass class, allowing a remote attacker to disclose sensitive information on vulnerable...
PT-2018-9840
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A command injection remote command execution issue exists due to a flaw in the LauncherServer, allowing a remote attacker to execute arbitrary code on vulnerable installations...
PT-2018-9841
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: The issue is related to an authentication weakness due to a flaw in the DBCrypto class, which could allow an attacker to recover user passwords if they first obtain access to the...
PT-2018-9837
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A flaw in the formRegistration2 class could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations. Authentication is required to exploit this issu...
The vulnerability of the editPolicy.jsp script in the Email Encryption Gateway system allows a hacker to execute arbitrary SQL queries.
The vulnerability of the editPolicy.jsp script in the Email Encryption Gateway system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the hidRuleld parameter...
Microsoft Office 365 Gets Built-in Ransomware Protection and Enhanced Security Features
Ransomware has been around for a few years, but it has become an albatross around everyone's neck, targeting big businesses, hospitals, financial institutions and individuals worldwide and extorting millions of dollars. Last year, we saw some major ransomware outbreaks, including WannaCry and...
CVE-2018-6230
A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system...
CVE-2018-6228
A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system...
CVE-2018-6229
A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system...
CVE-2018-6229
A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system...
CVE-2018-6226
Reflected cross-site scripting XSS vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6228
A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system...
CVE-2018-6230
A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system...
CVE-2018-6227
A stored cross-site scripting XSS vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6227
A stored cross-site scripting XSS vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6226
Reflected cross-site scripting XSS vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6222
Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulated to execute arbitrary commands and attain command execution on a vulnerable system...