17431 matches found
Design/Logic Flaw
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations...
CVE-2020-8606
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance...
CVE-2020-8605
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this vulnerability...
CVE-2020-8604
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations...
Cross site scripting
A cross-site scripting vulnerability XSS in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...
Design/Logic Flaw
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this vulnerability...
Authentication flaw
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance...
CVE-2020-8606
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance...
CVE-2020-8606
CVE-2020-8606 affects Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5. The Nessus plugin describes an authentication bypass in the HTTP proxy service that can be exploited remotely, enabling access to internal services. A separate but related issue in the same advisory references...
CVE-2020-8605
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this vulnerability...
CVE-2020-8604
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations...
CVE-2020-8605
The CVE-2020-8605 entry covers a remote-code-execution vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5. Public materials describe the root cause in the LogSettingHandler (mount_device path handling) that allows unauthenticated/root-level code execution in practice when c...
CVE-2020-8604
CVE-2020-8604 affects Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5. The connected Nessus entry attributes a path traversal vulnerability in the Apache Solr component (before parsing the file parameter) that, when combined with CVE-2020-8606, can allow an unauthenticated remote...
CVE-2020-8603
CVE-2020-8603 is a cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 that can allow a remote attacker to tamper with the web interface. The issue requires user interaction (visiting a malicious page or opening a malicious file) and stems from imp...
CVE-2020-8603
A cross-site scripting vulnerability XSS in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...
CVE-2020-13628
CVE-2020-13628 is a cross-site scripting (XSS) vulnerability in Centreon’s web widgets. The flaw allows remote attackers to inject arbitrary script or HTML via the widgetId parameter in host-monitoring/src/toolbar.php. Affected components and fixes are documented across multiple Centreon widgets:...
Pi-hole 4.4.0 Remote Code Execution
Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on: https://github.com/Frichetten/CVE-2020-11108-PoC/blob/master/cve-2020-11108-rce.py File na...
PT-2020-20233
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 Description A cross-site scripting issue may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this issu...
CVE-2020-8606: Improper Authentication
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance...
CVE-2020-8604: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations...