Trendmicro

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-11397 1Trendmicro 1Encryption For Email May 13, 2026 Dec 16, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system.
CVE-2017-14089 1Trendmicro 1Officescan May 13, 2026 Oct 6, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption...Show more An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.Show less
CVE-2017-14088 1Trendmicro 2Officescan Officescan Xg May 13, 2026 Oct 6, 2017 N/A· v4 7.0 HIGH· v3 6.9 MEDIUM· v2 Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulne...Show more Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.Show less
CVE-2017-14087 1Trendmicro 1Officescan May 13, 2026 Oct 6, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with po...Show more A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.Show less
CVE-2017-14086 1Trendmicro 1Officescan May 13, 2026 Oct 6, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potentia...Show more Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.Show less
CVE-2017-14085 1Trendmicro 1Officescan May 13, 2026 Oct 6, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.
CVE-2017-14084 1Trendmicro 1Officescan May 13, 2026 Oct 6, 2017 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.
CVE-2017-14083 1Trendmicro 1Officescan May 13, 2026 Oct 6, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file.
CVE-2017-14081 1Trendmicro 1Mobile Security May 13, 2026 Sep 22, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVE-2017-14080 1Trendmicro 1Mobile Security May 13, 2026 Sep 22, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.
CVE-2017-14079 1Trendmicro 1Mobile Security May 13, 2026 Sep 22, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVE-2017-14078 1Trendmicro 1Mobile Security May 13, 2026 Sep 22, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVE-2017-11396 1Trendmicro 1Interscan Web Security Virtual Appliance May 13, 2026 Sep 22, 2017 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement...Show more Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections.Show less
CVE-2017-11395 1Trendmicro 1Smart Protection Server May 13, 2026 Sep 22, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations.
CVE-2016-6220 1Trendmicro 1Control Manager May 13, 2026 Aug 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0.
CVE-2017-11394 1Trendmicro 1Officescan May 13, 2026 Aug 3, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter...Show more Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.Show less
CVE-2017-11393 1Trendmicro 1Officescan May 13, 2026 Aug 3, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter...Show more Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.Show less
CVE-2017-11392 1Trendmicro 1Interscan Messaging Security Virtual Appliance May 13, 2026 Aug 3, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by...Show more Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "T" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4745.Show less
CVE-2017-11391 1Trendmicro 1Interscan Messaging Security Virtual Appliance May 13, 2026 Aug 3, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by...Show more Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744.Show less
CVE-2017-11382 1Trendmicro 1Deep Discovery Email Inspector May 13, 2026 Aug 3, 2017 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350.

Previous 1...232425...28 Next