91 matches found
CVE-2017-14096
A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...
Design/Logic Flaw
A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...
CVE-2017-14094
A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...
CVE-2017-14094
A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...
CVE-2017-14096
A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...
CVE-2017-14094
CVE-2017-14094 affects Trend Micro Smart Protection Server (Standalone) up to version 3.2. It enables remote command execution via cron job injection in the admin_update_program.php flow when updates are scheduled, due to unsanitized HTTP parameters used to build cron entries. The vulnerability i...
CVE-2017-14097
An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...
CVE-2017-14096
CVE-2017-14096 corresponds to stored XSS in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below, with a broader set of vulnerabilities disclosed by Core Security (CORE-2017-0008) affecting the same product. Connected sources describe practical attack chains that an unauthentic...
CVE-2017-14095
CVE-2017-14095 affects Trend Micro Smart Protection Server (Standalone) up to version 3.2/3.3 as per multiple sources. The vulnerability enables remote command execution via local file inclusion (LFI) in the web UI, with demonstrated attack vectors that include: session hijacking to obtain an act...
CVE-2017-11398
CVE-2017-11398 affects Trend Micro Smart Protection Server (Standalone)
CVE-2017-14097
Trend Micro Smart Protection Server (Standalone)
CVE-2017-11398
A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system...
Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure Vulnerabilities
Exploit for multiple platform in category remote exploits 1. Advisory Information Title: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities Date...
Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure
Advisory Information Title: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities Date published: 2017-12-19 Date of last update: 2017-12-11...
Trend Micro Smart Protection Server Local Information Disclosure Vulnerability
Trend Micro Smart Protection Server is the next generation of cloud-based advanced protection solutions. A local information disclosure vulnerability exists in Trend Micro Smart Protection Server. An attacker could exploit the vulnerability to obtain sensitive information via log files...
Trend Micro Smart Protection Server Remote Command Execution Vulnerability (CNVD-2018-01119)
Trend Micro Smart Protection Server is the next generation of cloud-based advanced protection solutions. A remote command execution vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to remotely execute arbitrary commands via local file inclusio...
Trend Micro Smart Protection Server Remote Command Execution Vulnerability
Trend Micro Smart Protection Server is the next generation of cloud-based advanced protection solutions. A remote command execution vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to remotely execute arbitrary commands via timed job injection...
Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control
Trend Micro Smart Protection Server Multiple Vulnerabilities 1. Advisory Information Title:: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities...
Trend Micro Smart Protection Server Command Injection Vulnerability
Trend Micro Smart Protection Server is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Trend Micro Smart Protection Server Detection (HTTP)
Detection of Trend Micro Smart Protection Server. This script performs a HTTP based detection of Trend Micro Smart Protection Server. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...