CVE-2020-8469

Trend Micro Password Manager for Windows 5.0 is affected by a DLL hijacking vulnerability that could lead to local privilege escalation. This is documented across multiple sources; no exploitation status or remediation details are provided in the connected documents. Monitor for updates and rely ...

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

CVE-2020-8469: Uncontrolled Search Path Element

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

PT-2020-20155

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager for Windows version 5.0 Description The issue is related to a DLL hijacking vulnerability that could potentially allow an attacker privileged escalation. Recommendations For Trend Micro Password Manager for Windows...

Smart Check Validated for New Bottlerocket OS

Containers provide a list of benefits to organizations that use them. They’re light, flexible, add consistency across the environment and operate in isolation. However, security concerns prevent some organizations from employing containers. This is despite containers having an extra layer of...

Trend Micro Cloud App Security Blocked 12.7 Million High-Risk Email Threats in 2019 – in addition to those detected by cloud email services’ built-in security

On March 3, 2020, the cyber division of Federal Bureau of Investigation FBI issued a private industry notification calling out Business Email Compromise BEC scams through exploitation of cloud-based email services. Microsoft Office 365 and Google G Suite, the two largest cloud-based email service...

AMD L1D Cache Predictors AES Key Extraction

The vulnerability of the way predictor implementation in AMD processors’ L1D cache involves collisions with the hash function used to calculate tags, which are used to locate a channel in the L1D cache. Exploiting this vulnerability can allow an attacker to recover encryption keys in vulnerable A...

AMD CPU L1D Cache Memory Disclosure

The vulnerability of the way predictor’s implementation for first-level cache data on AMD CPUs’ L1D cache relates to the fact that accessing the same memory cell from a different virtual address may cause that cell to be evicted from the L1D cache. Exploiting this vulnerability could allow a remo...

CVE-2020-9517

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...

CVE-2020-9517

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...

CVE-2020-9517

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...

Design/Logic Flaw

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...

CVE-2020-9517

Technical details about CVE-2020-9517 are not publicly available in the provided documents. Monitor for updates from vendors and advisories; current entries describe a UI redress vulnerability in Micro Focus Service Manager Release Control 9.50/9.60 without specifics.

CVE-2020-9517

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...

CVE-2020-9517: Improper Restriction of Rendered UI Layers or Frames

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...

PT-2020-20707

Name of the Vulnerable Software and Affected Versions Micro Focus Service Manager Release Control versions 9.50 through 9.60 Description The issue is related to an improper restriction of rendered UI layers or frames, which may allow malicious users to perform UI redress attacks. Recommendations...

Logic Flaw Vulnerability in Micro-Platform of Shenzhen Kemin Technology Co.

Micro platform is customized for retail merchants by Shenzhen KePulse Technology Co., Ltd. set of micro-mall and membership marketing tools platform. A logic flaw vulnerability exists in the microplatform of Shenzhen Kewe Technology Co., Ltd, which can be exploited by attackers to obtain sensitiv...

This Week in Security News: 10,000 Users Affected by Leak from Misconfigured AWS Cloud Storage and Massive U.S. Property and Demographic Database Exposes 200 Million Records

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how the data of train commuters in the U.K. who were using the free Wi-Fi in Network Rail-managed stations was unintentionally...

Trend Micro Worry-Free Business Security (WFBS) Directory Traversal Vulnerability (1122250)

The remote host is running a version of the Trend Micro WFBS which is affected by a directory traversal vulnerability. An unauthenticated, remote attacker can exploit this, by sending a URI that contains directory traversal characters, to disclose the contents of files located outside of the...

High-Severity Cisco Webex Flaws Fixed

Cisco Systems has patched two high-severity vulnerabilities in its popular Webex video conferencing platform, which if exploited could allow an attacker to execute code on affected systems. Two multimedia players tied to the Webex platform are impacted. First is the Cisco Webex Network Recording...