Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Resource Management Error Vulnerability (CNVD-2021-08549)

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is vulnerable to a resource management error. No details of the vulnerability are available at this time...

PT-2020-16770

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance IMSVA version 9.1 Description The issue concerns a critical library in the Trend Micro InterScan Messaging Security Virtual Appliance that may be vulnerable to attack. Recommendations...

PT-2020-16595

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance IMSVA version 9.1 Description The issue allows an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. This can be...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Information Disclosure Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. The Trend Micro InterScan Messaging Security Virtual Appliance IMSVA suffers from an information disclosure vulnerability that originates from an error in configuration o...

CVE-2020-25837

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset SSPR product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information...

CVE-2020-25837

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset SSPR product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information...

Information disclosure

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset SSPR product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information...

CVE-2020-25837

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset SSPR product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information...

CVE-2020-25837

CVE-2020-25837 affects Micro Focus Self Service Password Reset (SSPR) versions 4.4.0.0–4.4.0.6 and 4.5.0.1–4.5.0.2. In certain configurations, the vulnerability could disclose sensitive information. The provided documents do not specify the exact root cause, exploitation details, affected configu...

Trend Micro IMSVA CSRF / XML Injection / SSRF / File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Trend Micro InterScan Messaging Security Virtual Appliance IMSVA vulnerable version: 9.1.0 Critical Patch Build 2025 fixed version: 9.1....

CVE-2020-25837: Undefined Security Weakness

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset SSPR product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information...

PT-2020-16235

Name of the Vulnerable Software and Affected Versions Micro Focus Self Service Password Reset SSPR versions 4.4.0.0 through 4.4.0.6 Micro Focus Self Service Password Reset SSPR versions 4.5.0.1 through 4.5.0.2 Description The issue is a sensitive information disclosure vulnerability. It could...

VMware Issues Updated Fix For Critical ESXi Flaw

VMware issued an updated fix for a critical-severity remote code execution flaw in its ESXi hypervisor products. Wednesday’s VMware advisory said updated patch versions were available after it was discovered the previous patch, released Oct. 20, did not completely address the vulnerability. That’...

Built-in Runtime Security for Containers

Security teams struggle with visibility into behaviors inside their running containers. Qualys is today announcing general availability of Container Runtime Security CRS to provide industry-leading visibility for running containers using an approach that is container-engine agnostic and layered...

Trend Micro Antivirus for Mac Competitive Conditions Vulnerability

Trend Micro Antivirus for Mac is a set of antivirus software based on the Mac platform from Trend Micro. A competitive condition vulnerability exists in Trend Micro Antivirus for Mac 2020 Consumer, which can be exploited by an attacker to cause the kernel to crash or die...

Trend Micro Antivirus for Mac Information Disclosure Vulnerability

Trend Micro Antivirus for Mac is a set of antivirus software based on Mac platform from Trend Micro. A security vulnerability exists in Trend Micro Antivirus for Mac 2020 Consumer that stems from an error message information disclosure vulnerability, which can be exploited by an attacker to cause...

CVE-2020-27015

Trend Micro Antivirus for Mac 2020 Consumer contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order...

CVE-2020-27014

Trend Micro Antivirus for Mac 2020 Consumer contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the...

CVE-2020-27014

Trend Micro Antivirus for Mac 2020 Consumer contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the...

CVE-2020-27015

Trend Micro Antivirus for Mac 2020 Consumer contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order...