PT-2021-16471

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about a specific configuration download file...

PT-2021-16465

Name of the Vulnerable Software and Affected Versions: Trend Micro Antivirus for Mac 2021 Consumer Description: The issue is a memory exhaustion vulnerability that could lead to disabling all the scanning functionality within the application. An attacker must first obtain the ability to execute...

PT-2021-16466

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated...

PT-2021-16467

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS versions not specified OfficeScan XG SP1 version not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about the database server...

PT-2021-16468

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS versions not specified OfficeScan XG SP1 version not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about the contents of a scan connecti...

PT-2021-16470

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS versions not specified OfficeScan XG SP1 version not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about the SQL database...

PT-2021-16469

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about a specific hotfix history file...

PT-2021-16473

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS versions not specified Trend Micro OfficeScan XG SP1 version not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about a content inspectio...

PT-2021-16476

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description: An improper access control information disclosure issue could allow an unauthenticated user to obtain information about an agent's...

CentOS 8 : kernel (CESA-2019:1167)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1167 advisory. - hardware: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12126 - hardware: Micro-architectural Load Port Data Sampling - Information Le...

CentOS 8 : virt:rhel (CESA-2019:1175)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1175 advisory. - hardware: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12126 - hardware: Micro-architectural Load Port Data Sampling - Information Le...

Why operational resilience will be key in 2021, and how this impacts cybersecurity

The lessons we have learned during the past 12 months have demonstrated that the ability to respond to and bounce back from adversity in general, can impact the short-and long-term success of any organization. It can even dictate the leaders and laggards in any industry. When we take into...

Why operational resilience will be key in 2021, and how this impacts cybersecurity

The lessons we have learned during the past 12 months have demonstrated that the ability to respond to and bounce back from adversity in general, can impact the short-and long-term success of any organization. It can even dictate the leaders and laggards in any industry. When we take into...

Trend Micro ServerProtect for Linux Memory Exhaustion Vulnerability

Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. A memory exhaustion vulnerability exists in the scanning engine component in Trend Micro ServerProtect for Linux. A local attacker could exploit this vulnerability via specially crafted...

Trend Micro ServerProtect for Linux memory exhaustion vulnerability (CNVD-2021-08540)

Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. A memory exhaustion vulnerability exists in the manual scanning component of Trend Micro ServerProtect for Linux. A local attacker could exploit this vulnerability via specially crafted...

Micro Focus UCMDB Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Micro Focus UCMDB Java Deserialization Unauthenticated Remote Code Execution', 'Description' = %q This module exploits two vulnerabilities, that...

Micro Focus UCMDB Remote Code Execution Exploit

This Metasploit module exploits two vulnerabilities, that when chained allow an attacker to achieve unauthenticated remote code execution in Micro Focus UCMDB. UCMDB included in versions 2020.05 and below of Operations Bridge Manager are affected, but this module can probably also be used to...

Trend Micro ServerProtect for Linux memory exhaustion vulnerability (CNVD-2021-08541)

Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. A memory exhaustion vulnerability exists in the timed scanning component in Trend Micro ServerProtect for Linux. A local attacker could exploit this vulnerability via specially crafted...

CVE-2021-25224

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execu...

CVE-2021-25225

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to...