2 matches found
CVE-2021-25252
CVE-2021-25252 concerns Trend Micro’s Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) experiencing a memory exhaustion vulnerability that can cause denial-of-service or a system freeze when processing specially crafted files. Affected components: VSAPI and ATSE in Trend Micro produc...
CVE-2024-48904
Trend Micro Cloud Edge contains a REST API command injection vulnerability. The root cause is insufficient data sanitization on the management surface, enabling an unauthenticated remote attacker to send specially crafted requests to TCP port 8443 and execute arbitrary code on affected appliances...