5908 matches found
CVE-2020-27693: Use of Password Hash With Insufficient Computational Effort
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 stores administrative passwords using a hash that is considered outdated...
CVE-2020-27016: Cross-Site Request Forgery (CSRF)
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 is vulnerable to a cross-site request forgery CSRF vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must...
CVE-2020-27694: Undefined Security Weakness
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 has updated a specific critical library that may vulnerable to attack...
Trend Micro Interscan Messaging Security Virtual Appliance (IMSVA) Detection Consolidation
Consolidation of Trend Micro Interscan Messaging Security Virtual Appliance IMSVA detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2020-3588
CVE-2020-3588 affects Cisco Webex Meetings Desktop App for Windows in virtual desktop environments. The root cause is improper validation of messages processed by the virtualization channel interface, allowing a local attacker with limited privileges to execute arbitrary code with the user’s priv...
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Information Disclosure Vulnerability
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. The Trend Micro InterScan Messaging Security Virtual Appliance IMSVA suffers from an information disclosure vulnerability that originates from an error in configuration o...
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Resource Management Error Vulnerability
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is vulnerable to a resource management error. No details of the vulnerability are available at this time...
PT-2020-16597
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance IMSVA version 9.1 Description The issue allows an authenticated attacker to abuse the product's web server, granting access to web resources or parts of local files. An attacker must...
PT-2020-16769
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance IMSVA version 9.1 Description The issue concerns the storage of administrative passwords using an outdated hash. Recommendations For Trend Micro InterScan Messaging Security Virtual...
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) XXE Vulnerability
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. A XXE vulnerability exists in the Trend Micro InterScan Messaging Security Virtual Appliance IMSVA. An attacker can exploit the vulnerability to read arbitrary local file...
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Cross-Site Request Forgery Vulnerability
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. The Trend Micro InterScan Messaging Security Virtual Appliance IMSVA suffers from a cross-site request forgery vulnerability that arises from a web application that does...
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Resource Management Error Vulnerability (CNVD-2021-08549)
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is vulnerable to a resource management error. No details of the vulnerability are available at this time...
PT-2020-16598
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance IMSVA version 9.1 Description The issue is an information disclosure vulnerability that could allow an attacker to access a specific database and key. Recommendations For Trend Micro...
PT-2020-16596
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance IMSVA version 9.1 Description The issue is related to an XML External Entity Processing XXE vulnerability. This could allow an authenticated administrator to read arbitrary local files...
PT-2020-16770
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance IMSVA version 9.1 Description The issue concerns a critical library in the Trend Micro InterScan Messaging Security Virtual Appliance that may be vulnerable to attack. Recommendations...
PT-2020-16595
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance IMSVA version 9.1 Description The issue allows an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. This can be...
WhatsApp Is Adding Disappearing Messages—With Some Limits
The popular encrypted messaging app now lets you automatically make chats vanish after a week, but look out for a few caveats...
Google Firebase cloud messaging abused to spread Android malware
By Waqas Dubbed Firestarter by researchers; the Android malware campaign is exploiting the Kashmir issue between India and Pakistan but its target remains the Pakistani government, noted Cisco Talos researchers. Cisco Talos researchers have discovered that the APT threat group DoNot exploits...
Firestarter Android Malware Abuses Google Firebase Cloud Messaging
An APT group is starting fires with a new Android malware loader, which uses a legitimate Google messaging service to bypass detection. The malware, dubbed “Firestarter,” is used by an APT threat group called “DoNot.” DoNot uses Firebase Cloud Messaging FCM, which is a cross-platform cloud soluti...
