Trendmicro

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-6218 1Trendmicro 5Deep Security Endpoint SensorOfficescan+2 more Nov 21, 2024 Feb 16, 2018 N/A· v4 7.0 HIGH· v3 5.1 MEDIUM· v2 A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.
CVE-2018-3609 1Trendmicro 1Interscan Messaging Security Virtual Appliance Nov 21, 2024 Feb 16, 2018 N/A· v4 8.1 HIGH· v3 4.3 MEDIUM· v2 A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information in a particular log file that could be u...Show more A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information in a particular log file that could be used to bypass authentication on vulnerable installations.Show less
CVE-2018-3607 1Trendmicro 1Control Manager Nov 21, 2024 Feb 9, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVE-2018-3606 1Trendmicro 1Control Manager Nov 21, 2024 Feb 9, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulne...Show more XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.Show less
CVE-2018-3605 1Trendmicro 1Control Manager Nov 21, 2024 Feb 9, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installation...Show more TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.Show less
CVE-2018-3604 1Trendmicro 1Control Manager Nov 21, 2024 Feb 9, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVE-2018-3603 1Trendmicro 1Control Manager Nov 21, 2024 Feb 9, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVE-2018-3602 1Trendmicro 1Control Manager Nov 21, 2024 Feb 9, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVE-2018-3601 1Trendmicro 1Control Manager Nov 21, 2024 Feb 9, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations.
CVE-2018-3600 1Trendmicro 1Control Manager Nov 21, 2024 Feb 9, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations.
CVE-2017-14097 1Trendmicro 1Smart Protection Server Nov 21, 2024 Jan 19, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access...Show more An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system.Show less
CVE-2017-14096 1Trendmicro 1Smart Protection Server Nov 21, 2024 Jan 19, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems.
CVE-2017-14095 1Trendmicro 1Smart Protection Server Nov 21, 2024 Jan 19, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system.
CVE-2017-14094 1Trendmicro 1Smart Protection Server Nov 21, 2024 Jan 19, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system.
CVE-2017-14082 1Trendmicro 1Mobile Security Nov 21, 2024 Jan 19, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vul...Show more An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system.Show less
CVE-2017-11398 1Trendmicro 1Smart Protection Server Nov 21, 2024 Jan 19, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authentica...Show more A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system.Show less
CVE-2017-14093 1Trendmicro 1Scanmail May 13, 2026 Dec 16, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks.
CVE-2017-14092 1Trendmicro 1Scanmail May 13, 2026 Dec 16, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.
CVE-2017-14091 1Trendmicro 1Scanmail May 13, 2026 Dec 16, 2017 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources - could be exploited to overwrite sensitive files in the Sca...Show more A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources - could be exploited to overwrite sensitive files in the ScanMail for Exchange directory.Show less
CVE-2017-14090 1Trendmicro 1Scanmail May 13, 2026 Dec 16, 2017 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.

Previous 1...222324...28 Next