Trend Micro Apex One Multiple Vulnerabilities (KA-0016669)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 12980 and Agent Build 12980. It is, therefore, affected by multiple vulnerabilities, including the following: - An origin validation vulnerability in the...

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) XSS (KA-0016722)

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5 could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...

Vulnerabilities of Linux operating system components and the kernel, which allow attackers to trigger service failures

The vulnerability of AMD components and the Linux operating system’s kernel is related to a memory leak in the amdsofacpprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of components related to DRM, AMD, and PM in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components related to DRM/AMD/PM in the Linux operating system is associated with errors in the double-release function of sidpminit. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi_compatibility function.

...

CVE-2024-51503

A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate access to the domain may be able to...

CVE-2024-51503: Improper Neutralization of Special Elements used in an OS Command

A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate access to the domain may be able to...

Trend Micro Deep Security 安全漏洞

Trend Micro Deep Security is a server deep security system client from Trend Micro. A security vulnerability exists in versions prior to Trend Micro Deep Security 20.0.1-21510 that stems from the presence of a command injection vulnerability that could allow an attacker to elevate privileges and...

Spot the Difference: Earth Kasha's New LODEINFO Campaign And The Correlation Analysis With The APT10 Umbrella

LODEINFO is a malware used in attacks targeting mainly Japan since 2019. Trend Micro has been tracking the group as Earth Kasha. We have identified a new campaign connected to this group with significant updates to their strategy, tactics, and arsenals...

Trend Micro Deep Security Agent Manual Scan Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Deep Security Agent. Authentication is required to exploit this vulnerability. The specific flaw exists within the Trend Micro Deep Security Notifier service. The issue results from the...

Trend Micro Deep Security Agent Local Privilege Escalation (KA-0016724)

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Note that Nessus has not tested for this issue but has instead relied solely on the application's self-reported version...

CVE-2024-50804

Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execute arbitrary code via the DeviceDeviceID.dat.bak file within the C:\ProgramData\MSI\One Dragon Center\Data folder...

CVE-2024-50804

An Insecure Permissions vulnerability exists in Micro-star International MSI Center Pro version 2.1.37.0 . This flaw allows a local attacker to execute arbitrary code by interacting with the Device_DeviceID.dat.bak file located in the C:\ProgramData\MSI\One Dragon Center\Data folder. The root cau...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components related to DRM, AMD, and display in the Linux operating system is associated with a memory corruption in the dpdscclockenread function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-50804

Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execute arbitrary code via the DeviceDeviceID.dat.bak file within the C:\ProgramData\MSI\One Dragon Center\Data folder...

PT-2024-34415 · Micro Star International · Msi Center Pro

Name of the Vulnerable Software and Affected Versions: Micro-star International MSI Center Pro version 2.1.37.0 Description: The issue allows a local attacker to execute arbitrary code via the Device DeviceID.dat.bak file within the C:ProgramDataMSIOne Dragon CenterData folder. This is due to an...

PT-2024-8684

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security Agent version 20 Description A security agent manual scan command injection issue in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected...

SUSE: Security Advisory (SUSE-SU-2024:3998-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Micro-Star MSI Center 安全漏洞

Micro-Star MSI Center is a monitoring and management platform from Micro-Star China. You can find all your favorite features such as Game Mode or Smart Priority on the Feature Set page. A security vulnerability exists in Micro-Star MSI Center version 2.1.37.0, which stems from an insecure privile...

PT-2025-25272

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central versions prior to 8.0.7007 Description The issue is related to an insecure deserialization operation, which could lead to a pre-authentication remote code execution on affected installations. This vulnerability is...