Lucene search
+L

6 matches found

OSV
OSV
•added 2020/11/18 7:15 p.m.•17 views

CVE-2020-28581

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

7.2CVSS7.3AI score0.44953EPSS
SaveExploits1References2
NVD
NVD
•added 2020/11/18 7:15 p.m.•36 views

CVE-2020-28581

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

9CVSS7.5AI score0.44953EPSS
SaveExploits1References2
Prion
Prion
•added 2020/11/18 7:15 p.m.•27 views

Command injection

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

9CVSS7.5AI score0.44953EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/11/18 6:45 p.m.•43 views

CVE-2020-28581

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

7.5AI score0.44953EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/11/18 12:00 a.m.•3 views

PT-2020-17021

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A command injection issue in ModifyVLANItem could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS command...

9CVSS0.44953EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/18 12:00 a.m.•4 views

CVE-2020-28581: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

9CVSS6.3AI score0.44953EPSS
SaveExploits1References2
Rows per page
Query Builder