CVE-2020-28575: Out-of-bounds Write

A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this...

CVE-2020-28573: Undefined Security Weakness

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server...

Trend Micro Apex One information leakage vulnerability

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities.Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. An incorrect access control information disclosure...

CVE-2020-28583: Undefined Security Weakness

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information...

CVE-2020-28577: Undefined Security Weakness

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names...

CVE-2020-28582: Undefined Security Weakness

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents...

Trend Micro Serverprotect for Linux Buffer Overflow Vulnerability

Trend Micro Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. Trend Micro ServerProtect for Linux suffers from a buffer overflow vulnerability that can be exploited by an attacker who can trigger a buffer overflow to trigger a denial of...

PT-2020-6078

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to an improper access control information disclosure, which could allow an unauthenticated user...

Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro OfficeScan. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue...

Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro OfficeScan. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue...

Trend Micro Serverprotect for Linux Buffer Error Vulnerability

Trend Micro Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. Trend Micro ServerProtect for Linux suffers from a buffer overflow vulnerability that can be exploited by an attacker who can trigger a buffer overflow to trigger a denial of...

Trend Micro Security 2020 Local Elevation of Privilege Vulnerability (CNVD-2020-73785)

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer contains a security vulnerability that can be exploited by an attacker to gain administrative privileges during product installation by placing a specific Windows...

Trend Micro Security 2020 Local Elevation of Privilege Vulnerability (CNVD-2020-73786)

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer has a security vulnerability that can be exploited by an attacker by placing a malicious DLL in an unprotected location and high privileges symbolic link attack, whic...

Micro Focus IDOL Cross-Site Scripting Vulnerability

Micro Focus IDOL is an AI engine for text analytics, speech analytics, and video analytics from Micro Focus UK. The product can be used in scenarios such as enterprise search, chatbots, government open source intelligence and unstructured data analysis. A cross-site scripting vulnerability exists...

PT-2020-17018

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 Description A heap-based buffer overflow privilege escalation issue may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute...

Trend Micro ServerProtect ioctlMod Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro ServerProtect. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

XSS Vulnerability in Microsoft CMS

Micro Window CMS is a free and open source WeChat public number and Alipay service window management platform system. Micro Window CMS suffers from an XSS vulnerability, which originates from improper filtering of parameters passed into the system during registration. Attackers can use this...

PT-2020-6076

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 Description The issue is related to an improper access control information disclosure. It may allow a remote attacker to gain unauthorized access to protected...

PT-2020-6079

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to an improper access control information disclosure. It could allow an unauthenticated user to...

PT-2020-6077

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 Description The issue is related to an improper access control information disclosure. It may allow a remote attacker to gain unauthorized access to protected...