JVN#49593434: Trend Micro Password Manager vulnerable to information disclosure

Password Manager provided by Trend Micro Incorporated contains an information disclosure vulnerability CWE-200. Under certain conditions, the information ID, password etc. managed by Password Manager are kept on the memory in plaintext. They may be retrieved when the memory scan is done. Impact A...

SQL Injection Vulnerability in Micro Edge Live of Shenzhen Micro Edge Information Technology Co.

Shenzhen Micro Edge Information Technology Co., Ltd. is a WeChat third-party service for regional self-publishers, and has released six categories of products: dating, matchmaking, live broadcasting, recruitment, real estate, and carpooling. A SQL injection vulnerability exists in Shenzhen Micro...

Trend Micro Maximum Security 2019 - Arbitrary Code Execution Vulnerability

Exploit Title: Trend Micro Maximum Security 2019 - Arbitrary Code Execution Exploit Author: hyp3rlinx Vendor Homepage: www.trendmicro.com Version: Platform Microsoft Windows, Premium Security 2019 v15, Maximum Security 2019 v15 Internet Security 2019 v15, Antivirus + Security 2019 v15 + Credits:...

Tencent micro cloud has dll hijacking vulnerability

Micro Cloud is an intelligent cloud service created by Tencent for its users. A dll hijacking vulnerability exists in the Tencent Micro Cloud client. An attacker can exploit this vulnerability to execute arbitrary code...

INTERPOL Collaboration Reduces Cryptojacking by 78%

Cybercriminals are often seen as having the upper hand over the “white hat” community. After all, they’re anonymous, can launch attacks from virtually anywhere in the world, and usually have the element of surprise. But there’s one secret weapon the good guys have: Collaboration. That’s why Trend...

SQL Injection Vulnerability in 51 Micro Voting System

51 Micro Voting System is a platform system that provides customers with online voting services through the Internet. There is a SQL injection vulnerability in 51MicroVoting System, which can be exploited by attackers to obtain sensitive information in the database...

Huawei micro-programmed routing software Resource Leak DoS

The vulnerability of Huawei’s microprogrammed router software relates to the inability to release resources after the expiration of their useful lifespan. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The Summit of Cybersecurity Sits Among the Clouds

Trend Micro Apex One as a Service You have heard it before, but it needs to be said again—threats are constantly evolving and getting sneakier, more malicious, and harder to find than ever before. It’s a hard job to stay one step ahead of the latest threats and scams organizations come across, bu...

Celebrating Decades of Success with Microsoft at the Security 20/20 Awards

Effective collaboration is key to the success of any organization. But perhaps none more so than those working towards the common goal of securing our connected world. That’s why Trend Micro has always been keen to reach out to industry partners in the security ecosystem, to help us collectively...

This Week in Security News: Latest Cyber Risk Index Shows Elevated Risk of Cyber Attack and IoT Company Wyze Exposes Information of 2.4M Customers

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about Trend Micro’s Cyber Risk Index CRI and its results showing increased cyber risk. Also, read about a data breach from IoT company...

Micro Focus AcuToWeb Information Disclosure Vulnerability

Micro Focus AcuToWeb is a suite of web and mobile deployment solutions for ACUCOBOL applications from Micro Focus UK. An information disclosure vulnerability exists in Micro Focus AcuToWeb all supported versions. An attacker could exploit this vulnerability to enumerate files on the file system...

Apple macOS Mojave AMD Component Memory Corruption Vulnerability

Apple macOS Mojave is the operating system for Apple's line of Mac computers. A memory corruption vulnerability exists in the memory handling of the AMD component of Apple macOS Mojave, which can be exploited by an attacker to execute arbitrary code with system privileges...

CVE-2019-19695

A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 v9.0.1379 and below could potentially allow an attacker to create a symbolic link to a target file and modify it...

CVE-2019-19695

A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 v9.0.1379 and below could potentially allow an attacker to create a symbolic link to a target file and modify it...

Privilege escalation

A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 v9.0.1379 and below could potentially allow an attacker to create a symbolic link to a target file and modify it...

CVE-2019-19695

CVE-2019-19695 affects Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below). The provided sources describe a privilege escalation where an attacker could create a symbolic link to a target file and modify it. The primary documented impact is on integrity via modification of the targeted file,...

CVE-2019-19695

A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 v9.0.1379 and below could potentially allow an attacker to create a symbolic link to a target file and modify it...

PT-2019-15918

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac versions 9.0.1379 and below Description A privilege escalation issue could potentially allow an attacker to create a symbolic link to a target file and modify it. Recommendations For versions 9.0.1379 and below,...

Trend Micro Antivirus for Mac power lifting vulnerability (CNVD-2020-03732)

Trend Micro Antivirus for Mac is a set of antivirus software based on Mac platform from Trend Micro. A boost vulnerability exists in Trend Micro Antivirus for Mac 2019 9.0.1379 and earlier versions, which can be exploited by an attacker to create a symbolic link to a target file and modify the fi...

CVE-2019-19695: Improper Link Resolution Before File Access

A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 v9.0.1379 and below could potentially allow an attacker to create a symbolic link to a target file and modify it...