Trend Micro Control Manager Debug Level Authentication Bypass Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of debug settings. The software does not provide...

Trend Micro Control Manager RestfulServiceUtility.NET SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the Investigate endpoint in RestfulServiceUtility.NET.dll. The issue results...

The vulnerability of the Service Control Manager (SCM) component in the Android operating system allows a hacker to bypass certificate verification.

The vulnerability of the Service Control Manager SCM component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass certificate verification...

Trend Micro Control Manager XML External Entity Processing

An XML external entity processing vulnerability exists in Trend Micro Control Manager. The vulnerability is due to lack of validation of user-supplied input prior to executing an XML query. A remote, authenticated attacker could exploit this vulnerability by sending a malicious HTTP request to th...

Trend Micro Control Manager ProductTree_RightWindow XML External Entity Processing

An XML external entity XXE processing vulnerability exist in Trend Micro Control Manager. The vulnerability is due to lack of validation of user-supplied input prior to executing an XML query in ProductTreeRightWindow.aspx. A remote, authenticated attacker could exploit this vulnerability by...

Trend Micro Control Manager Authentication Bypass Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. An authentication bypass vulnerability exists in Trend Micro Control Manager. An attacker could use this vulnerability to bypass the authentication mechanism and...

Multiple SQL Injection Vulnerabilities in Trend Micro Control Manager

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. Trend Micro Control Manager suffers from multiple SQL injection vulnerabilities that stem from a failure to adequately validate SQL queries before utilizing user dat...

Trend Micro Control Manager cgiShowClientAdm Security Bypass

The version of Trend Micro Control Manager running on the remote host is affected by a security bypass vulnerability when processing calls to the cgiShowClientAdm web function due to a failure to provide authentication for the functionality that exposes, modifies, or deletes DLP templates involve...

Trend Micro Control Manager File Upload

File upload vulnerability in Trend Micro Control Manager importFile.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Trend Micro Control Manager File Disclosure

File disclosure vulnerability in Trend Micro Control Manager download.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Trend Micro Control Manager cgiShowClientAdm Missing Authentication for Critical Function Vulnerability

This vulnerability allows remote attackers to modify the security posture of the underlying product on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the...

Trend Micro Control Manager Widget importFile.php Directory Traversal

A directory traversal vulnerability has been reported in Trend Micro Control Manager. This vulnerability is caused by improper sanitization of directory traversal characters by importFile php. A remote, unauthenticated attacker could exploit this vulnerability by uploading arbitrary files onto th...

Trend Micro Control Manager download.php Information Disclosure

An information disclosure vulnerability exists in Trend Micro Control Manager. The vulnerability is due to security misconfiguration which allows access to the unreferenced download.php file, which in turn allow reading of the arbitrary files...

Trend Micro Control Manager importFile.php Directory Traversal

A directory traversal vulnerability has been reported in Trend Micro Control Manager. This vulnerability is caused by improper sanitization of directory traversal characters.. by importFile.php. A remote attacker could exploit this vulnerability by uploading arbitrary files onto the vulnerable...

Trend Micro Control Manager Detection (uncredentialed)

Binary data trendmicrocontrolmanagerdetectunauth.nbin...

Trend Micro Control Manager download.php File Disclosure

The version of Trend Micro Control Manager running on the remote host is affected by a file disclosure vulnerability due to a failure to properly sanitize user-supplied input to the download.php script. An unauthenticated, remote attacker can exploit this, via a crafted request employing director...

Multiple SQL Injection Vulnerabilities in Trend Micro Control Manager (CNVD-2017-01598)

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. Trend Micro Control Manager suffers from multiple SQL injection vulnerabilities that stem from a failure to adequately validate SQL queries before using user input. ...

Multiple Directory Traversal Vulnerability in Trend Micro Control Manager

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. Trend Micro Control Manager suffers from multiple directory traversal vulnerabilities that stem from failure to adequately validate user input. The vulnerabilities c...

Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetoldSP1's modDLPTemplateMatchdrildown.php script. The issue lies in t...

Trend Micro Control Manager importFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the importFile.php script. The issue lies in the failure to properly...