50 matches found
EUVD-2018-17989
Malware in sbrugna...
CVE-2018-10356
A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRequestDomains class. Authentication is required to exploit this vulnerability...
CVE-2018-10354
A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the LauncherServer. Authentication is required to exploit this vulnerability...
CVE-2018-10352: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formConfiguration class. Authentication is required to exploit this vulnerability...
CVE-2018-10353: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable installations due to a flaw in the formChangePass class. Authentication is required to exploit this vulnerability...
CVE-2018-10351: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRegistration2 class. Authentication is required to exploit this vulnerability...
CVE-2018-10354: Improper Neutralization of Special Elements used in an OS Command
A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the LauncherServer. Authentication is required to exploit this vulnerability...
CVE-2018-10355: Insufficiently Protected Credentials
An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploi...
CVE-2018-10356: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRequestDomains class. Authentication is required to exploit this vulnerability...
PT-2018-9842
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A SQL injection remote code execution issue exists due to a flaw in the formRequestDomains class, allowing an attacker to execute arbitrary SQL statements on vulnerable...
PT-2018-9837
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A flaw in the formRegistration2 class could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations. Authentication is required to exploit this issu...
PT-2018-9838
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A flaw in the formConfiguration class could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations. Authentication is required to exploit this issu...
PT-2018-9839
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A SQL injection information disclosure issue exists due to a flaw in the formChangePass class, allowing a remote attacker to disclose sensitive information on vulnerable...
PT-2018-9840
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A command injection remote command execution issue exists due to a flaw in the LauncherServer, allowing a remote attacker to execute arbitrary code on vulnerable installations...
PT-2018-9841
Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: The issue is related to an authentication weakness due to a flaw in the DBCrypto class, which could allow an attacker to recover user passwords if they first obtain access to the...
CVE-2018-6226
Reflected cross-site scripting XSS vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6227
A stored cross-site scripting XSS vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulnerable systems...
Xxe
An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...
Cross site request forgery (csrf)
A lack of cross-site request forgery CSRF protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit authenticated requests to a user browsing an attacker-controlled domain...
