PT-2017-17039

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance version 9.1-1600 Description The issue allows an authenticated user to execute a terminal command in the context of the web server user, which is root. The default installation comes...

PT-2017-2910

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description The issue exists due to insufficient input validation, allowing a remote attacker to modify arbitrary files or execute arbitrary code with root privileges by exploiting...

Design/Logic Flaw

Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...

CVE-2017-6798

Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...

CVE-2017-6798

Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...

CVE-2017-6798

Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...

CVE-2017-6798

CVE-2017-6798 affects Trend Micro Endpoint Sensor 1.6 before b1290. The vulnerability is a DLL hijacking issue in the Endpoint Sensor that could allow a remote attacker to execute arbitrary code in the context of an affected application. CVSS metrics indicate a HIGH base score with Local attack v...

Trend Micro SafeSync for Enterprise 3.2 check_nfs_server_status RCE

Remote command execution vulnerability in Trend Micro SafeSync for Enterprise checknfsserverstatus Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

PT-2017-17330

Name of the Vulnerable Software and Affected Versions Trend Micro Endpoint Sensor version 1.6 before b1290 Description The issue allows remote attackers to execute arbitrary code through a DLL hijacking vulnerability. Recommendations For Trend Micro Endpoint Sensor version 1.6 before b1290, updat...

CVE-2017-6798: Untrusted Search Path

Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...

Trend Micro SafeSync for Enterprise 3.2 get_replacement RCE

Remote command execution vulnerability in Trend Micro SafeSync for Enterprise getreplacement Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Trend Micro Control Manager download.php Information Disclosure

An information disclosure vulnerability exists in Trend Micro Control Manager. The vulnerability is due to security misconfiguration which allows access to the unreferenced download.php file, which in turn allow reading of the arbitrary files...

Trend Micro Deep Discovery Email Inspector firewall_setting Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within firewallsetting.php. The issue results from the lack of...

Trend Micro Deep Discovery Email Inspector write_new_html_with_svg Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within writenewhtmlwithsvg.php. The issue results from the lack of...

Trend Micro Deep Discovery Email Inspector get_filesize Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within getfilesize.php. The issue results from the lack of proper...

Trend Micro Deep Discovery Email Inspector screenshot Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within screenshot.php. The issue results from the lack of proper...

Trend Micro Deep Discovery Email Inspector reboot_after_hotfix Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within rebootafterhotfix.php. The issue results from...

Trend Micro Deep Discovery Email Inspector ajax_checklicense_AC Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxchecklicenseAC.php. The issue results from the lack of...

Trend Micro Deep Discovery Email Inspector db_export Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within dbexport.php. The issue results from the lack of proper...

Trend Micro Deep Discovery Email Inspector network_dump Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within networkdump.php. The issue results from the lack of proper...