What do Developers Look for When Choosing Software

We asked five software developers at Trend Micro how they research the software solutions they use professionally or in their own projects...

CVE-2021-38123

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication...

CVE-2021-38123

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication...

Open redirect

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication...

CVE-2021-38123

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication...

CVE-2021-38123

CVE-2021-38123 is an Open Redirect vulnerability in Micro Focus Network Automation. Affected are Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The cited impact is that authenticated users can be redirected to malicious websites after logi...

CVE-2021-38123: URL Redirection to Untrusted Site

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication...

PT-2021-21956

Name of the Vulnerable Software and Affected Versions: Micro Focus Network Automation versions 10.4x through 10.5x Micro Focus Network Automation versions 2018.05 through 2021.05 Description: The issue allows attackers to redirect users to malicious websites after authentication. This could...

CVE-2021-36744

Trend Micro Security Consumer 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service...

CVE-2021-36744

Trend Micro Security Consumer 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service...

CVE-2021-36744

Trend Micro Security Consumer 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service...

CVE-2021-36744

Trend Micro Security Consumer 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service...

CVE-2021-36744

CVE-2021-36744: A directory junction vulnerability exists in Trend Micro Maximum Security/consumer components (as discussed in ZDI advisory) that allows a local attacker with low privileges to create a directory junction via the Maximum Security Agent, enabling denial-of-service by deleting a fil...

CVE-2021-36744: Improper Link Resolution Before File Access

Trend Micro Security Consumer 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service...

Trend Micro Security family vulnerable to improper handling of Directory Junction

Overview Trend Micro Incorporated has released security updates for Trend Micro Security family. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solutions through JVN. Impact An attacker may obtain unauthorized privileges and cause a denial-of-service DoS...

JTEKT TOYOPUC Products

1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: JTEKT Corporation Equipment: TOYOPUC products Vulnerability: Allocation of Resources Without Limits or Throttling 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote...

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: WebAccess Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow remote code execution. 3. TECHNICAL DETAILS 3.1...

Trend Micro Security Backlink Vulnerability

Trend Micro Security is a suite of computer security software from Trend Micro, Inc. A back-linking vulnerability exists in Trend Micro Security Consumer, which stems from the product's failure to properly check for symbolic links to think-only directories. An attacker could exploit the...

PT-2021-4416

Name of the Vulnerable Software and Affected Versions AMD CPUs affected versions not specified Existing AMD CPUs vulnerable to the issue AMD CPUs based on Zen+ and Zen 2 microarchitectures Description The issue is related to speculative execution of read and write operations, accessing memory usi...

PT-2021-21331

Name of the Vulnerable Software and Affected Versions Trend Micro Security Consumer versions 2020 through 2021 Description The issue is related to a directory junction vulnerability. This could allow an attacker to exploit the system, potentially escalating privileges and creating a denial of...