CVE-2019-19688

The CVE-2019-19688 entry concerns Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063). Connected sources confirm a local privilege escalation vulnerability in which an attacker can place a malicious DLL into the application directory to elevate privileges. Affected component: the ...

CVE-2019-19688

A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited allowing an attacker to place a malicious DLL file into the application directory and elevate privileges...

CVE-2019-19688: Undefined Security Weakness

A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited allowing an attacker to place a malicious DLL file into the application directory and elevate privileges...

PT-2019-15912

Name of the Vulnerable Software and Affected Versions Trend Micro HouseCall for Home Networks versions prior to 5.3.0.1063 Description A privilege escalation issue could be exploited, allowing an attacker to place a malicious DLL file into the application directory and elevate privileges...

PT-2019-15914

Name of the Vulnerable Software and Affected Versions Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below Description The issue allows an attacker to bypass the App Password Protection feature. Recommendations For versions 10.3.1 and below, update to a version above 10.3.1 ...

PT-2019-15913

Name of the Vulnerable Software and Affected Versions Trend Micro HouseCall for Home Networks versions prior to 5.3.0.1063 Description The issue is related to a DLL Hijack vulnerability in the packer used by the program. Recommendations For versions prior to 5.3.0.1063, update to version 5.3.0.10...

CVE-2019-19689: Uncontrolled Search Path Element

Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses...

CVE-2019-19690: Weak Password Requirements

Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature...

CVE-2019-11657

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

Cross site request forgery (csrf)

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

CVE-2019-11657

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

CVE-2019-11657

Micro Focus ArcSight Logger has a Cross-Site Request Forgery (CSRF) vulnerability affecting all product versions prior to 7.0. The vulnerability arises from a web application that does not adequately validate request origins, enabling CSRF attacks without explicit user interaction in some sources...

PT-2019-12460

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Logger versions prior to 7.0 Description A Cross-Site Request Forgery issue affects the product, potentially allowing an attacker to perform a CSRF attack. Recommendations For versions prior to 7.0, update to version 7.0 o...

CVE-2019-11657: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

CVE-2019-18191

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

Privilege escalation

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

CVE-2019-18191

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

CVE-2019-18191

The CVE-2019-18191 entry concerns Trend Micro Deep Security as a Service Quick Setup cloud formation template. The vulnerability enables privilege escalation where an authenticated entity with certain unrestricted AWS execution privileges can gain full privileges within the target AWS account. Do...

CVE-2019-18191: Incomplete Cleanup

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

PT-2019-15264

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security as a Service affected versions not specified Description A privilege escalation issue exists in the Quick Setup cloud formation template of Trend Micro Deep Security as a Service. This could allow an authenticated...