Lucene search
+L

7528 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:00 a.m.29 views

Trend Micro Apex One Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS0.9AI score0.01873EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:00 a.m.46 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.02026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:00 a.m.30 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.02153EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:00 a.m.38 views

Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro OfficeScan. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue...

5.3CVSS1.2AI score0.02083EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:00 a.m.40 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.02083EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:00 a.m.32 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.02094EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/28 12:00 a.m.34 views

Trend Micro ServerProtect for Linux memory exhaustion vulnerability (CNVD-2021-08540)

Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. A memory exhaustion vulnerability exists in the manual scanning component of Trend Micro ServerProtect for Linux. A local attacker could exploit this vulnerability via specially crafted...

5.5CVSS6.5AI score0.00404EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/28 12:00 a.m.57 views

Trend Micro ServerProtect for Linux memory exhaustion vulnerability (CNVD-2021-08541)

Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. A memory exhaustion vulnerability exists in the timed scanning component in Trend Micro ServerProtect for Linux. A local attacker could exploit this vulnerability via specially crafted...

5.5CVSS6.5AI score0.00404EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/28 12:00 a.m.40 views

Trend Micro ServerProtect for Linux Memory Exhaustion Vulnerability

Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. A memory exhaustion vulnerability exists in the scanning engine component in Trend Micro ServerProtect for Linux. A local attacker could exploit this vulnerability via specially crafted...

5.5CVSS6.5AI score0.00404EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/27 7:15 p.m.38 views

CVE-2021-25226

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execu...

5.5CVSS5.5AI score0.00404EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/27 7:15 p.m.36 views

CVE-2021-25225

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to...

5.5CVSS5.5AI score0.00404EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/27 7:15 p.m.10 views

CVE-2021-25225

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to...

5.5CVSS6.3AI score0.00404EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/27 7:15 p.m.10 views

CVE-2021-25224

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execu...

5.5CVSS6.3AI score
SaveExploits0References2
OSV
OSV
added 2021/01/27 7:15 p.m.10 views

CVE-2021-25247

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

7.8CVSS7.3AI score0.00749EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/27 7:15 p.m.27 views

CVE-2021-25224

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execu...

5.5CVSS5.5AI score0.00404EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/27 7:15 p.m.16 views

CVE-2021-25247

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

7.8CVSS8AI score0.00749EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/27 7:15 p.m.27 views

Design/Logic Flaw

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

4.4CVSS8AI score0.00749EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/01/27 7:15 p.m.32 views

Privilege escalation

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execu...

2.1CVSS5.5AI score0.00404EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/01/27 7:15 p.m.24 views

Privilege escalation

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to...

2.1CVSS5.5AI score0.00404EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/27 7:10 p.m.30 views

CVE-2021-25247

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

8.2AI score0.00749EPSS
SaveExploits0References1
Rows per page
Query Builder