7238 matches found
CVE-2024-39753
An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
CVE-2024-48904
An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note: authentication is not required in order to exploit this vulnerability...
CVE-2024-48904
An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note: authentication is not required in order to exploit this vulnerability...
CVE-2024-48904
Trend Micro Cloud Edge contains a REST API command injection vulnerability. The root cause is insufficient data sanitization on the management surface, enabling an unauthenticated remote attacker to send specially crafted requests to TCP port 8443 and execute arbitrary code on affected appliances...
CVE-2024-48903
An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2024-48903
CVE-2024-48903 affects Trend Micro Deep Security Agent 20. An improper access-control vulnerability could let a local, non-admin attacker escalate to higher privileges after obtaining the ability to execute low-privileged code. Documents consistently describe a local privilege-escalation impact, ...
CVE-2024-48903
An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2024-46903
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2024-46903
Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above are affected by a SQL injection-related information disclosure vulnerability (CVE-2024-46903). The issue resides in the web service that processes inputs and leads to unauthorized disclosure of sensitive installation data. Exploita...
CVE-2024-46903
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2024-46902
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code admin user rights on the target system in ord...
CVE-2024-46902
A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code admin user rights on the target system in ord...
CVE-2024-46902
Affected product: Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above. The issue is described as a SQL injection vulnerability in the web service that can lead to disclosure of sensitive information in affected installations. Exploitation details in the public docs indicate that aut...
CVE-2024-45335
Trend Micro Antivirus One (v3.10.4 and earlier) is affected due to insufficient input validation that could allow a specially crafted virus to bypass or evade virus scanning detection. The issue could potentially be exploited by a remote attacker to defeat detection. Remediation: upgrade to a ver...
CVE-2024-45335
Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detection...
CVE-2024-45335
Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detection...
CVE-2024-45334
Trend Micro Antivirus One versions 3.10.4 and below Consumer is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to product configurations and functions...
CVE-2024-45334
Trend Micro Antivirus One versions 3.10.4 and below Consumer is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to product configurations and functions...
CVE-2024-45334
Trend Micro Antivirus One, affected: version 3.10.4 and earlier (Consumer). The vulnerability is an Arbitrary Configuration Update that could let an attacker obtain unauthorized access to product configurations and functions. Root cause appears to be insufficient access control that enables arbit...