Trend Micro Maximum Security tmnciesc Kernel Driver Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Trend Micro Maximum Security tmnciesc driver Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

Trend Micro Internet Security Security Bypass Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security bypass vulnerability exists in versions 8 and 10 of Trend Micro Internet Security, which could be exploited by...

Multiple Vulnerabilities in Trend Micro Smart Protection Server

Trend Micro Smart Protection Server is a server that provides smart protection. Trend Micro Smart Protection Server has multiple security vulnerabilities that can be exploited by remote attackers to submit a special request to view arbitrary system files, execute arbitrary code, and gain privileg...

Trend Micro Control Manager TreeUserControl_process_tree_event Information Disclosure

An XML external entity XXE processing vulnerability has been reported in Trend Micro Control Manager. The vulnerability is due to lack of validation of user-supplied input prior to executing an XML query in TreeUserControlprocesstreeevent.aspx. A remote, authenticated attacker could exploit this...

Trend Micro Control Manager task_controller Information Disclosure

An information disclosure vulnerability has been reported in Trend Micro Control Manager. The vulnerability is due to lack of validation of the 'url' parameter in the request for taskcontrol.php. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted HT...

Trend Micro Control Manager AdHocQuery_Processor.aspx SQL Injection

A SQL injection vulnerability has been reported in Trend Micro Control Manager. The vulnerability is due to lack of validation on two parameters in the AdHocQueryProcessor.aspx script. A remote, authenticated attacker could exploit this vulnerability by sending a malicious HTTP request to the...

Unspecified Remote Command Execution Vulnerability in Trend Micro SafeSync for Enterprise

SafeSync for Enterprise is a Miscellaneous Shareware software developed by Trend Micro in category. An unspecified remote command execution vulnerability exists in Trend Micro SafeSync for Enterprise. An attacker can exploit the vulnerability to execute arbitrary code...

Trend Micro Internet Security vulnerability where files may be excluded as scan targets

Overview Trend Micro Internet Security provided by Trend Micro Incorporated contains a vulnerability where arbitrary files or folders may be excluded as scan targets when the conditions below are met. An attacker can place a specific file into the system The attacker can execute a specific API fr...

JVN#98126322: Trend Micro Internet Security vulnerability where files may be excluded as scan targets

Trend Micro Internet Security provided by Trend Micro Incorporated contains a vulnerability where arbitrary files or folders may be excluded as scan targets when the conditions below are met. An attacker can place a specific file into the system The attacker can execute a specific API from the...

lib32-flashplugin: multiple issues

CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, CVE-2016-6924 arbitrary code execution Multiple Memory corruption vulnerabilities that could lead to arbitrary code execution have been found...

Trend Micro Control Manager Detection

Binary data trendmicrocontrolmanagerdetect.nbin...

Trend Micro Control Manager 6.x < 6.0 SP3 Hotfix 3328 Multiple Vulnerabilities

According to its version, the Trend Micro Control Manager application installed on the remote Windows host is 6.x prior to 6.0 SP 3 Hotfix 3328 6.0.0.3328. It is, therefore, affected by the following vulnerabilities : - A directory traversal vulnerability exists in the taskcontroller.php script d...

Microsoft Fixes 47 Vulnerabilities with September Patch Tuesday

Microsoft patched 47 vulnerabilities as part of 14 security bulletins, seven critical, with its monthly Patch Tuesday updates today. The company is warning users that if left unpatched, 10 of the issues can lead to remote execution. The updates resolve issues in Microsoft Windows, Office, Office...

Multiple Vulnerabilities in Trend Micro InterScan Messaging Security

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. Trend Micro InterScan Messaging Security has multiple vulnerabilities. The vulnerabilities can be exploited by an attacker to execute arbitrary script code on a trusted user's browser in the context of an affected...

Trend Micro Smart Protection Server Elevation of Privilege Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. An elevation of privilege vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to gain elevated privileges...

Trend Micro InterScan Messaging Security Cross-Site Scripting Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. A cross-site scripting vulnerability exists in Trend Micro InterScan Messaging Security. An attacker could exploit the vulnerability to execute arbitrary script code on a trusted user's browser in the context of an...

Trend Micro Smart Protection Server Directory Traversal Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. A directory traversal vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to retrieve arbitrary files in the context of an application on an affected system using a specially...

Trend Micro Smart Protection Server Remote Code Execution Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. A remote code execution vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to execute arbitrary code...

Trend Micro InterScan Messaging Security Open Redirect Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. Trend Micro InterScan Messaging Security suffers from an open redirection vulnerability. The vulnerability allows an attacker to be redirected to an attacker-controlled website...