7247 matches found
CVE-2016-8584
CVE-2016-8584 affects Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier, where predictable session values enable remote attackers to bypass authentication by guessing the session value. The description states an authentication bypass via session generation, with CVSS metrics indicatin...
CVE-2016-8593
Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via a .. dot dot in the dID parameter...
CVE-2016-8591
logquery.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...
CVE-2016-8593
Trend Micro Threat Discovery Appliance (TDA)
CVE-2016-8591
CVE-2016-8591 affects Trend Micro Threat Discovery Appliance (TDA)
CVE-2016-8592
Affected product: Trend Micro Threat Discovery Appliance (TDA) versions 2.6.1062r1 and earlier. Component exposed: log_query_system.cgi. Vulnerability: remote authenticated users can inject shell metacharacters via the cache_id parameter to execute arbitrary code with root privileges. This is a p...
CVE-2016-8585
CVE-2016-8585 affects Trend Micro Threat Discovery Appliance,
CVE-2016-8589
CVE-2016-8589 affects Trend Micro Threat Discovery Appliance
CVE-2016-8586
CVE-2016-8586 affects Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier. The vulnerability is in the detected_potential_files.cgi component, where shell metacharacters in the cache_id parameter allow a remote authenticated user to execute arbitrary code as root. The provided documents...
CVE-2016-8587
CVE-2016-8587 affects Trend Micro Threat Discovery Appliance prior to or including 2.6.1062r1, in the dlp_policy_upload.cgi handler. The flaw arises when an uploaded archive containing a symlink is extracted, allowing a remote authenticated attacker to place a symlink to sensitive locations (for ...
CVE-2016-8587
dlppolicyupload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via an archive file containing a symlink to /engptnstores/prod/sensorSDK/data/ or /engptnstores/prod/sensorSDK/backuppol/...
CVE-2016-8590
logquerydlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...
CVE-2016-8586
detectedpotentialfiles.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 24, 2017
There was a time when a person’s motivation to hack something was for financial reasons or for street cred. But now we’re seeing organizations that have other motivations. Pawn Storm is a cyber-espionage organization whose motives include foreign and domestic espionage, and influence on...
Trend Micro Control Manager cgiShowClientAdm Security Bypass
The version of Trend Micro Control Manager running on the remote host is affected by a security bypass vulnerability when processing calls to the cgiShowClientAdm web function due to a failure to provide authentication for the functionality that exposes, modifies, or deletes DLP templates involve...
Trend Micro and INTERPOL: Teaming Up Again to Fight Global Cybercrime
At Trend Micro we have a long history of partnering with law enforcement whenever called upon. We believe that the skills and resources of the private sector can offer allow law enforcement to surge and scale on any particular threat. Combatting the threat posed by transnational cyber criminal...
Trend Micro Control Manager File Upload
File upload vulnerability in Trend Micro Control Manager importFile.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Trend Micro OfficeScan Multiple Privilege Escalation and Cross Site Scripting Vulnerabilities
Trend Micro OfficeScan is prone to a privilege escalation vulnerability and multiple cross-site scripting vulnerabilities SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...