Lucene search
+L

5 matches found

NVD
NVD
•added 2023/02/01 3:15 a.m.•28 views

CVE-2023-0587

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory...

9.1CVSS9.4AI score0.59585EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/01 3:15 a.m.•50 views

Unrestricted file upload

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory...

6.4CVSS9.3AI score0.59585EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/02/01 12:00 a.m.•42 views

CVE-2023-0587

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory...

9.6AI score0.59585EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/02/01 12:00 a.m.•21 views

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One server version 11110, which arises from the use of an incorrectly formatted Content-Length header in its HTTP PUT message that allows an unauthenticated, remote attack...

9.1CVSS8.7AI score0.59585EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/01 12:00 a.m.•5 views

CVE-2023-0587: Unrestricted Upload of File with Dangerous Type

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory...

9.1CVSS5.9AI score0.59585EPSS
SaveExploits0References3
Rows per page
Query Builder