CVE-2019-14688

This CVE affects Trend Micro installer packages. A DLL hijack vulnerability was present in an installer version used by multiple Trend Micro products and could be exploited only during the initial product installation by an authorized user. The attacker must cause the target to place a malicious ...

CVE-2021-31520

Trend Micro IM Security web console suffers a weak session token authentication bypass (auth bypass via guessable tokens) affecting 1.6 and 1.6.5. An unauthenticated remote attacker can exploit the guessable tokens to bypass login and access the web management interface (web console on port 16373...