Micro Star MSI True Color security vulnerabilities

Micro Star MSI True Color is a color calibration application from Micro Star Technology Micro Star Inc. of Taiwan, China. A security vulnerability exists in Micro Star MSI True Color that stems from an elevation of privilege LPE/EoP vulnerability in multiple components of the driver. All...

This Week in Security News - February 4, 2022

Welcome to our weekly roundup, where we share what you need to know about cybersecurity news and events that happened over the past few days. Learn about the Samba vulnerability discovered by Trend Micro the White House’s warning of Russian hacks as tensions with Ukraine grow...

PT-2022-10694 · Micro Focus · Micro Focus Voltage Securemail Mail Relay +1

Name of the Vulnerable Software and Affected Versions: Micro Focus Voltage SecureMail Mail Relay versions prior to 7.3.0.1 Description: A potential information leakage issue has been identified. This could be exploited to create an information leakage attack. The issue is related to a business...

PT-2022-16277

Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security Server affected versions not specified Description A security out-of-bounds read information disclosure issue could allow a local attacker to send garbage data to a specific named pipe and crash the...

Trend Micro Worry-Free Business Security Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fl...

This Week in Security News - January 28th, 2022

Welcome to our weekly roundup, where we share what you need to know about cybersecurity news and events that happened over the past few days. This week, read the third installment of Trend Micro’s Codex series. Also, read about the White House’s latest zero-trust approach to its cybersecurity...

Defending the Supply Chain: Why the DDS Protocol is Critical in Industrial and Software Systems

In 2021, a team of researchers from Trend Micro Research, TXOne, ADLINK, Alias Robotics, and ZDI looked into the Data Distribution Service DDS standard and its implementations from a security angle. The full findings of this research will be presented in the S4X22 Conference in April 2022...

Apple macOS Monterey buffer error vulnerability

Apple macOS Monterey is the 18th major release of Apple's US macOS for the Macintosh desktop operating system. Apple macOS Monterey 12.2 suffers from a buffer error vulnerability that stems from a boundary error in the AMD kernel in macOS. An attacker could exploit the vulnerability to run a...

Vulnerability fixed in Micro Focus Operations Agent

A vulnerability has been fixed in Micro Focus Operational Agent. The vulnerability allows a local malicious agent to access gain access to system data. Micro Focus indicates that mitigating measures are available that eliminate the vulnerability. For more information see:...

CVE-2021-38129

Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected by Operations Agent...

CVE-2021-38129

Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected by Operations Agent...

Privilege escalation

Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected by Operations Agent...

CVE-2021-38129

Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected by Operations Agent...

CVE-2021-38129

CVE-2021-38129 is a local privilege-escalation vulnerability in Micro Focus Operations Agent affecting versions 12.x up to and including 12.21. A non-privileged local user could access system monitoring data collected by the agent. The incident is documented across multiple sources (NVD, Red Hat ...

Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux

Overview Deep Security and Cloud One - Workload Security Agent for Linux provided by Trend Micro Incorporated contain multiple vulnerabilities listed below. Directory Traversal CWE-22 - CVE-2022-23119 Code Injection CWE-94 - CVE-2022-23120 As of 2022 January 24, a Proof-of-Concept PoC code...

CVE-2021-38129: Undefined Security Weakness

Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected by Operations Agent...

Vulnerabilities fixed in Trend Micro Deep Security

Two vulnerabilities have been fixed in Trend Micro Deep Security Agent for Linux. The vulnerability with attribute CVE-2022-23119 can be exploited if access is gained to the Deep Security Manager or on devices on which the agent is not yet not yet activated or configured. The vulnerability with...

PT-2022-10692

Name of the Vulnerable Software and Affected Versions Micro Focus Operations Agent versions 12.x up to and including 12.21 Description The issue allows a non-privileged local user to exploit an escalation of privileges vulnerability, potentially accessing system monitoring data collected by...

Micro Focus Operations Agent security vulnerabilities

Micro Focus Operations Agent is a software application from Micro Focus UK. monitors and manages systems and applications deployed in a networked environment from a centralized console. A security vulnerability exists in Micro Focus Operations Agent that can be exploited by an unprivileged local...

Trend Micro Deep Security Code Injection Vulnerability

Trend Micro Deep Security is a suite of intelligent data protection solutions from Trend Micro. A code injection vulnerability exists in the Trend Micro Deep Security Agent that stems from an input validation error when handling directory traversal sequences. An attacker could use this...