Lucene search
+L

13080 matches found

CVE
CVE
โ€ขadded 2025/06/17 6:42 p.m.โ€ข71 views

CVE-2025-49155

CVE-2025-49155 involves an uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module, enabling arbitrary code execution on affected installations. Affected software: Trend Micro Apex One Data Loss Prevention (module specified; no exact versions given in source...

8.8CVSS8.9AI score0.00915EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
โ€ขadded 2025/06/17 6:42 p.m.โ€ข27 views

CVE-2025-49155

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations...

8.8CVSS0.00915EPSS
SaveExploits0References2
Cvelist
Cvelist
โ€ขadded 2025/06/17 6:42 p.m.โ€ข31 views

CVE-2025-49154

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability of affected installations. Please note: an...

8.7CVSS0.0012EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
โ€ขadded 2025/06/17 6:42 p.m.โ€ข11 views

CVE-2025-49154

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability of affected installations. Please note: an...

8.7CVSS7.4AI score0.0012EPSS
SaveExploits0References2
CVE
CVE
โ€ขadded 2025/06/17 6:42 p.m.โ€ข65 views

CVE-2025-49154

CVE-2025-49154 affects Trend Micro Apex One and Trend Micro Worry-Free Business Security with an insecure access control vulnerability that can allow a local attacker to overwrite key memory-mapped files, impacting security and stability. Root cause is improper access controls; exploitation requi...

8.7CVSS8.6AI score0.0012EPSS
SaveExploits0References2Affected Software2
NVD
NVD
โ€ขadded 2025/06/17 6:15 p.m.โ€ข33 views

CVE-2025-49220

An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49219 but is in a different method...

9.8CVSS0.02057EPSS
SaveExploits0References2
osv_cve
osv_cve
โ€ขadded 2025/06/17 6:15 p.m.โ€ข19 views

CVE-2025-47867

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations...

9.8CVSS6.6AI score0.01902EPSS
SaveExploits0References2
osv_cve
osv_cve
โ€ขadded 2025/06/17 6:15 p.m.โ€ข16 views

CVE-2025-47866

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations...

7.5CVSS5.9AI score0.003EPSS
SaveExploits0References2
osv_cve
osv_cve
โ€ขadded 2025/06/17 6:15 p.m.โ€ข17 views

CVE-2025-49219

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method...

9.8CVSS6.4AI score0.01415EPSS
SaveExploits0References2
NVD
NVD
โ€ขadded 2025/06/17 6:15 p.m.โ€ข27 views

CVE-2025-49219

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method...

9.8CVSS0.01415EPSS
SaveExploits0References2
NVD
NVD
โ€ขadded 2025/06/17 6:15 p.m.โ€ข19 views

CVE-2025-47867

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations...

9.8CVSS0.01902EPSS
SaveExploits0References2
NVD
NVD
โ€ขadded 2025/06/17 6:15 p.m.โ€ข19 views

CVE-2025-47866

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations...

7.5CVSS0.003EPSS
SaveExploits0References2
NVD
NVD
โ€ขadded 2025/06/17 6:15 p.m.โ€ข20 views

CVE-2025-47865

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations...

9.8CVSS0.01802EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
โ€ขadded 2025/06/17 5:43 p.m.โ€ข6 views

CVE-2025-49220

An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49219 but is in a different method...

9.8CVSS9.7AI score0.02057EPSS
SaveExploits0References2
CVE
CVE
โ€ขadded 2025/06/17 5:43 p.m.โ€ข70 views

CVE-2025-49220

Trend Micro Apex Central is affected by CVE-2025-49220 due to an insecure deserialization vulnerability in versions below 8.0.7007. The issue allows pre-authentication remote code execution on affected installations and is noted to be in a different method from CVE-2025-49219. The CVSSv3 data ind...

9.8CVSS9.8AI score0.02057EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
โ€ขadded 2025/06/17 5:43 p.m.โ€ข53 views

CVE-2025-49220

An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49219 but is in a different method...

9.8CVSS0.02057EPSS
SaveExploits0References2
Cvelist
Cvelist
โ€ขadded 2025/06/17 5:43 p.m.โ€ข41 views

CVE-2025-49219

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method...

9.8CVSS0.01415EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
โ€ขadded 2025/06/17 5:43 p.m.โ€ข34 views

CVE-2025-49219

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method...

9.8CVSS9.7AI score0.01415EPSS
SaveExploits0References2
CVE
CVE
โ€ขadded 2025/06/17 5:43 p.m.โ€ข67 views

CVE-2025-49219

CVE-2025-49219 describes an insecure deserialization in Trend Micro Apex Central, affecting versions below 8.0.7007 and leading to pre-authentication remote code execution. The vulnerability type and impact are stated in public CVE entries (pre-auth RCE; high impact). Connected documents corrobor...

9.8CVSS9.8AI score0.01415EPSS
SaveExploits0References2Affected Software1
CVE
CVE
โ€ขadded 2025/06/17 5:42 p.m.โ€ข46 views

CVE-2025-47867

CVE-2025-47867 concerns a Local File Inclusion in Trend Micro Apex Central widget for versions

9.8CVSS7.9AI score0.01902EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder