Trend Micro Security 2020 Postback Link Vulnerability

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer has a security vulnerability that can be exploited by an attacker by placing a malicious DLL in an unprotected location and high privileges symbolic link attack, whic...

CVE-2020-28581: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

PT-2020-16772

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2020 Consumer affected versions not specified Description The issue concerns a vulnerability in the installer package of the software. This vulnerability can be exploited by placing a specific file in a Windows system...

Trend Micro Worry-Free Business Security: Path traversal vulnerability

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and e-mail protection. A path traversal arbitrary remote file deletion vulnerability exists in Trend Mic...

Trend Micro Apex One information leakage vulnerability

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities.Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. An incorrect access control information disclosure...

CVE-2020-28579: Out-of-bounds Write

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges...

CVE-2020-28580: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

CVE-2020-28578: Out-of-bounds Write

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges...

PT-2020-5819

Name of the Vulnerable Software and Affected Versions: Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance could allow an unauthenticated, remote attacker to send a specially crafted HTTP message...

PT-2020-17019

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A vulnerability could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges...

PT-2020-17016

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Description A vulnerability could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a higher privilege...

PT-2020-17021

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A command injection issue in ModifyVLANItem could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS command...

CVE-2020-27696: Undefined Security Weakness

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory which can lead to obtaining administrative privileges during the installation of the product...

Trend Micro OfficeScan XG information leakage vulnerability

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities.Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. An incorrect access control information disclosure...

Trend Micro Security 2020 code-related vulnerabilities

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer suffers from a local elevation of privilege vulnerability that can be exploited by an attacker by placing a malicious DLL in a local directory, which can lead to...

PT-2020-17020

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A command injection issue in the AddVLANItem function could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary ...

CVE-2020-27695: Untrusted Search Path

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory which can lead to obtaining administrative privileges during the installation of the product...

Trend Micro Security 2020 Security Vulnerabilities

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer contains a security vulnerability that can be exploited by an attacker to gain administrative privileges during product installation by placing a specific Windows...

Trend Micro OfficeScan XG and Trend Micro Apex One have information leakage vulnerabilities

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities.Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. An incorrect access control information disclosure...

Trend Micro InterScan Web Security Virtual Appliance Command Injection Vulnerability (CNVD-2021-08543)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance...