Lucene search
+L

307 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/01/06 12:00 a.m.27 views

Trend Micro Apex One Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fl...

6.1CVSS4.2AI score0.004EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/06 12:00 a.m.39 views

Trend Micro Worry-Free Business Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

6.1CVSS4.3AI score0.004EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/19 12:00 a.m.29 views

Trend Micro Apex One Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Security...

7CVSS5.4AI score0.00378EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/19 12:00 a.m.35 views

Trend Micro Apex One Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Security...

7CVSS5.4AI score0.00378EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/19 12:00 a.m.30 views

Trend Micro Apex One Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Security...

7CVSS5.4AI score0.00378EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/07/13 12:00 a.m.68 views

Trend Micro Apex One Incorrect Permission Assignment Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists withi...

6.1CVSS3.4AI score0.00355EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.23 views

The vulnerability of Trend Micro Deep Security Agent lies in its improper handling of links before accessing a file. This allows attackers to delete any files they desire.

The vulnerability of the Trend Micro Deep Security Agent lies in the improper handling of links before accessing a file. Exploiting this vulnerability could allow an attacker to delete any files they desire...

7.1CVSS7AI score0.01311EPSS
SaveExploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:00 a.m.15 views

The vulnerability of the Security Agent component in Trend Micro’s antivirus software solutions—Worry-Free Business Security, Apex One, and OfficeScan—allows a malicious actor to escalate their privileges or execute arbitrary code.

The vulnerability of the Security Agent component in Trend Micro’s antivirus software products, namely Worry-Free Business Security, Apex One, and OfficeScan, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or execute...

7.8CVSS7.5AI score0.00776EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:00 a.m.14 views

The vulnerability of the Security Agent component in Trend Micro’s antivirus software solutions—Worry-Free Business Security, Apex One, and OfficeScan—allows attackers to increase their privileges.

The vulnerability of the Security Agent component in Trend Micro’s antivirus software products, namely Worry-Free Business Security, Apex One, and OfficeScan, is related to deficiencies in access control for the “Misc” folder. Exploiting this vulnerability can allow attackers to increase their...

7.8CVSS7.2AI score0.02639EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2021/04/12 12:00 a.m.66 views

Trend Micro Apex One Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS4.7AI score0.01909EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/12 12:00 a.m.57 views

Trend Micro Apex One Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS4.9AI score0.00508EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/01/13 9:17 p.m.30 views

CVE-2021-1237 Cisco AnyConnect Secure Mobility Client for Windows DLL Injection Vulnerability

A vulnerability in the Network Access Manager and Web Security Agent components of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL injection attack. To exploit this vulnerability, the attacker would need to have valid credentials o...

7.8CVSS7.5AI score0.00395EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/29 12:15 a.m.33 views

CVE-2020-24563

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option if configured, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged co...

7.8CVSS0.00482EPSS
SaveExploits0References2
OSV
OSV
added 2020/09/29 12:15 a.m.9 views

CVE-2020-24563

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option if configured, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged co...

7.8CVSS7.3AI score0.00482EPSS
SaveExploits0References2
Prion
Prion
added 2020/09/29 12:15 a.m.19 views

Design/Logic Flaw

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option if configured, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged co...

7.2CVSS8AI score0.00482EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2020/09/25 12:00 a.m.41 views

Trend Micro Apex One Authentication Bypass Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS5AI score0.00482EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/25 12:00 a.m.34 views

Trend Micro OfficeScan Hard Link Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro OfficeScan. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the OfficeSca...

7.8CVSS4AI score0.00573EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/09/01 12:00 a.m.7 views

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2020-52195)

Trend Micro Apex One is an endpoint protection solution that offers the broadest range of protection capabilities, including high-accuracy machine learning and advanced ransomware protection. An elevation of privilege vulnerability exists in the logic that controls access to the Misc folder in th...

7.8CVSS8.9AI score0.02639EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/09/01 12:00 a.m.16 views

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2020-52194)

Trend Micro Apex One is an endpoint protection solution that offers the broadest range of protection capabilities, including high-accuracy machine learning and advanced ransomware protection. An elevation of privilege vulnerability exists in the ApexOne Security Agent in Trend Micro Apex One. An...

7.8CVSS7.5AI score0.00776EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/09/01 12:00 a.m.14 views

Trend Micro Apex One Elevation of Privilege Vulnerability

Trend Micro Apex One is an endpoint protection solution that offers the broadest range of protection capabilities, including high-accuracy machine learning and advanced ransomware protection. An elevation of privilege vulnerability exists in the ApexOne Security Agent in Trend Micro Apex One. An...

7.8CVSS7.5AI score0.00787EPSS
SaveExploits0References1
Rows per page
Query Builder