@angstone/micro (0.0.1), @angstone/microservice (0.0.17) +4 more potentially affected by CVE-2019-10790 via taffy (2.6.2)

taffy NPM version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on taffy and may be impacted: - @angstone/micro 0.0.1 - @angstone/microservice 0.0.17 - anrajs =1.0.0, =0.0.1, =0.0.7, =1.0.6 - neyka 3.0.0 Source cves: CVE-2019-10790 Source advisory...

Trend Micro Anti-Threat Toolkit Arbitrary Code Execution Vulnerability

Trend Micro Anti-Threat Toolkit is a Trend Micro anti-threat toolkit. The Trend Micro Anti-Threat Toolkit contains an arbitrary code execution vulnerability that can be exploited by remote attackers to place malicious files in the same directory as the application, which can be executed in the...

RSA BSAFE Micro Edition DoS

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are due to numerical...

RSA BSAFE Micro Edition Information Disclosure

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service software, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related...

RSA BSAFE Micro Edition Suite Uncontrolled Resource Consumption

The vulnerabilities of the RSA BSAFE Micro Edition Suite, BSAFE Crypto-C Micro Edition, and Oracle Security Service, as well as the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center...

RSA BSAFE Micro Edition

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related to the u...

CVE-2019-20358

Trend Micro Anti-Threat Toolkit ATTK versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution RCE when executed. Another attack vector similar to CVE-2019-9491 was idenitfi...

CVE-2019-20358

Trend Micro Anti-Threat Toolkit ATTK versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution RCE when executed. Another attack vector similar to CVE-2019-9491 was idenitfi...

Remote code execution

Trend Micro Anti-Threat Toolkit ATTK versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution RCE when executed. Another attack vector similar to CVE-2019-9491 was idenitfi...

CVE-2019-20358

Trend Micro Anti-Threat Toolkit ATTK versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution RCE when executed. Another attack vector similar to CVE-2019-9491 was idenitfi...

CVE-2019-20358

Summary: Trend Micro Anti-Threat Toolkit (ATTK) is affected by CVE-2019-20358 and CVE-2019-9491. Affected products are ATTK versions 1.62.0.1218 and earlier. Root cause involves the ability for an attacker to place malicious files in the same directory as the ATTK executable, potentially enabling...

PT-2020-10395

Name of the Vulnerable Software and Affected Versions Trend Micro Anti-Threat Toolkit ATTK versions 1.62.0.1218 and below Description The issue may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution RCE when executed. An attack...

CVE-2019-20358: Untrusted Search Path

Trend Micro Anti-Threat Toolkit ATTK versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution RCE when executed. Another attack vector similar to CVE-2019-9491 was idenitfi...

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) Information Disclosure Vulnerability (1122250)

According to its self-reported version, the instance of Trend Micro InterScan Web Security Virtual Appliance is affected by an information disclosure vulnerability in its web console component. An authenticated, remote attacker can exploit this, to disclose credentials of the web console...

Trend Micro OfficeScan Directory Traversal Vulnerability (000151730)

The remote host is running a version of the Trend Micro engine which is affected by a directory traversal vulnerability. An unauthenticated, remote attacker can exploit this, by sending a URI that contains directory traversal characters, to extract files from an arbitrary zip file to a specific...

CVE-2019-5124

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered...

This Week in Security News: Trend Micro Creates Factory Honeypot to Trap Malicious Attackers and Microsoft Leaves 250M Customer Service Records Open to the Web

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, dive into a research study that explores the risks associated with common cybersecurity vulnerabilities in a factory setting. Also, read abo...

Trend Micro OfficeScan Directory Traversal Vulnerability (1122250)

The remote host is running a version of the Trend Micro engine which is affected by a directory traversal vulnerability. An unauthenticated, remote attacker can exploit this, by sending a URI that contains directory traversal characters, to disclose the contents of files located outside of the...

Pwn2Own Miami Contestants Haul in $180K for Hacking ICS Equipment

The very first Pwn2Own hacking competition that exclusively focuses on the industrial control systems ICS has kicked off in Miami. So far, a total of $180,000 has been awarded for pwning five different products. The contest hosts at Trend Micro’s Zero Day initiative ZDI have allocated more than...

micro-screen.net Cross Site Scripting vulnerability

Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting micro-screen.net website and its users. Following coordinated and responsible vulnerability...