Trendmicro
Page 5 of 6 — Trendmicro CVEs from a corpus of 575, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9492 | High | 7.8 | 2019-07-26 | A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the produ… |
CVE-2019-9490 | High | 8.8 | 2019-04-05 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative credentia… |
CVE-2019-9489 | High | 7.5 | 2019-04-05 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) c… |
CVE-2018-18334 | High | 7.5 | 2019-02-05 | A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions below 3.0.1478 could allow an remote attacker to bypass the Sa… |
CVE-2018-18333 | High | 7.8 | 2019-02-05 | A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL… |
CVE-2018-18332 | High | 7.5 | 2018-12-21 | A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other f… |
CVE-2018-18331 | High | 7.5 | 2018-12-21 | A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which c… |
CVE-2018-18330 | Medium | 6.5 | 2018-12-21 | An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below could allow an attacker to potentially trick… |
CVE-2018-18329 | High | 7.8 | 2018-10-23 | A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a lo… |
CVE-2018-18328 | High | 7.8 | 2018-10-23 | A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a lo… |
CVE-2018-18327 | High | 7.8 | 2018-10-23 | A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a lo… |
CVE-2018-15367 | High | 7.8 | 2018-10-23 | A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could al… |
CVE-2018-15366 | High | 7.8 | 2018-10-23 | A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a lo… |
CVE-2018-15365 | Medium | 5.4 | 2018-09-28 | A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection a… |
CVE-2018-15364 | Medium | 4.7 | 2018-08-30 | A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro OfficeScan XG (12.0) could allow a local attacker to dis… |
CVE-2018-15363 | High | 7.8 | 2018-08-30 | An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges o… |
CVE-2018-10514 | High | 7.8 | 2018-08-30 | A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges… |
CVE-2018-10513 | High | 7.8 | 2018-08-30 | A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalat… |
CVE-2018-10512 | High | 7.5 | 2018-08-15 | A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations, w… |
CVE-2018-10511 | Critical | 10.0 | 2018-08-15 | A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side request forgery (SSRF) attack on vulnera… |
CVE-2018-10510 | Critical | 9.8 | 2018-08-15 | A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to execute arbitrary co… |
CVE-2018-3608 | Critical | 9.8 | 2018-07-06 | A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to crea… |
CVE-2018-10509 | High | 8.8 | 2018-06-12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations. An att… |
CVE-2018-10508 | High | 8.8 | 2018-06-12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable in… |
CVE-2018-10507 | Medium | 4.4 | 2018-06-12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Chan… |
CVE-2018-10506 | Medium | 4.7 | 2018-06-08 | A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to disclose sensitive informat… |
CVE-2018-10505 | Medium | 6.3 | 2018-06-08 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerabl… |
CVE-2018-10359 | Medium | 6.3 | 2018-06-08 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerabl… |
CVE-2018-10358 | Medium | 6.3 | 2018-06-08 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerabl… |
CVE-2018-6237 | High | 7.5 | 2018-05-25 | A vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an unauthenticated remote attacker to manipulate the product to send a larg… |
CVE-2018-6236 | High | 7.0 | 2018-05-25 | A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privile… |
CVE-2018-6235 | High | 7.8 | 2018-05-25 | An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges o… |
CVE-2018-6234 | Medium | 5.5 | 2018-05-25 | An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to disclose sensitive i… |
CVE-2018-6233 | High | 7.8 | 2018-05-25 | A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vul… |
CVE-2018-6232 | High | 7.8 | 2018-05-25 | A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vul… |
CVE-2018-10350 | High | 8.8 | 2018-05-25 | A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary… |
CVE-2018-10357 | High | 8.8 | 2018-05-23 | A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable insta… |
CVE-2018-10356 | High | 8.8 | 2018-05-23 | A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on… |
CVE-2018-10355 | High | 7.0 | 2018-05-23 | An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installati… |
CVE-2018-10354 | High | 8.8 | 2018-05-23 | A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code… |
CVE-2018-10353 | Medium | 6.5 | 2018-05-23 | A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive informatio… |
CVE-2018-10352 | High | 8.8 | 2018-05-23 | A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due t… |
CVE-2018-10351 | High | 8.8 | 2018-05-23 | A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due t… |
CVE-2018-6231 | Critical | 9.8 | 2018-03-15 | A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and below could allow remo… |
CVE-2018-6230 | Medium | 6.8 | 2018-03-15 | A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upl… |
CVE-2018-6229 | Critical | 9.8 | 2018-03-15 | A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and e… |
CVE-2018-6228 | Critical | 9.8 | 2018-03-15 | A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute… |
CVE-2018-6227 | Medium | 5.4 | 2018-03-15 | A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulner… |
CVE-2018-6226 | Medium | 5.4 | 2018-03-15 | Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject clie… |
CVE-2018-6225 | Medium | 4.3 | 2018-03-15 | An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protect… |
CVE-2018-6224 | High | 8.8 | 2018-03-15 | A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit authenticate… |
CVE-2018-6223 | Critical | 9.8 | 2018-03-15 | A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate the registr… |
CVE-2018-6222 | High | 7.8 | 2018-03-15 | Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulated to execute arbit… |
CVE-2018-6221 | High | 8.1 | 2018-03-15 | An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle attacker to tamper with an update file… |
CVE-2018-6220 | Critical | 9.8 | 2018-03-15 | An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining c… |
CVE-2018-6219 | Medium | 6.5 | 2018-03-15 | An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with certain types of upd… |
CVE-2018-6218 | High | 7.0 | 2018-02-16 | A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system. |
CVE-2018-3609 | High | 8.1 | 2018-02-16 | A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access s… |
CVE-2018-3607 | High | 8.8 | 2018-02-09 | XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitr… |
CVE-2018-3606 | High | 8.8 | 2018-02-09 | XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 cou… |
CVE-2018-3605 | High | 8.8 | 2018-02-09 | TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote… |
CVE-2018-3604 | High | 8.8 | 2018-02-09 | GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary c… |
CVE-2018-3603 | High | 8.8 | 2018-02-09 | A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary cod… |
CVE-2018-3602 | High | 8.8 | 2018-02-09 | An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arb… |
CVE-2018-3601 | Critical | 9.8 | 2018-02-09 | A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerab… |
CVE-2018-3600 | Medium | 6.5 | 2018-02-09 | A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive… |
CVE-2017-14097 | Critical | 9.8 | 2018-01-19 | An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents… |
CVE-2017-14096 | Medium | 6.1 | 2018-01-19 | A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute… |
CVE-2017-14095 | High | 8.1 | 2018-01-19 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a lo… |
CVE-2017-14094 | Critical | 9.8 | 2018-01-19 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cr… |
CVE-2017-14082 | High | 7.5 | 2018-01-19 | An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated… |
CVE-2017-11398 | High | 8.8 | 2018-01-19 | A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated… |
CVE-2017-14093 | Medium | 6.1 | 2017-12-16 | The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks. |
CVE-2017-14092 | High | 8.8 | 2017-12-16 | The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an… |
CVE-2017-14091 | High | 7.5 | 2017-12-16 | A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources… |
CVE-2017-14090 | Critical | 9.1 | 2017-12-16 | A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted. |
CVE-2017-11397 | High | 7.8 | 2017-12-16 | A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arb… |
CVE-2017-14089 | Critical | 9.8 | 2017-10-06 | An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan serv… |
CVE-2017-14088 | High | 7.0 | 2017-10-06 | Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate priv… |
CVE-2017-14087 | High | 7.5 | 2017-10-06 | A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to ren… |
CVE-2017-14086 | High | 7.5 | 2017-10-06 | Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan serv… |
CVE-2017-14085 | Medium | 5.3 | 2017-10-06 | Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the… |
CVE-2017-14084 | High | 8.1 | 2017-10-06 | A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable ins… |
CVE-2017-14083 | High | 7.5 | 2017-10-06 | A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file. |
CVE-2017-14081 | High | 8.8 | 2017-09-22 | Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary cod… |
CVE-2017-14080 | Critical | 9.8 | 2017-09-22 | Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the c… |
CVE-2017-14079 | High | 8.8 | 2017-09-22 | Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerabl… |
CVE-2017-14078 | Critical | 9.8 | 2017-09-22 | SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulne… |
CVE-2017-11396 | High | 7.2 | 2017-09-22 | Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who al… |
CVE-2017-11395 | High | 8.8 | 2017-09-22 | Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated ac… |
CVE-2016-6220 | High | 7.5 | 2017-08-07 | Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0. |
CVE-2017-11394 | Critical | 9.8 | 2017-08-03 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. T… |
CVE-2017-11393 | Critical | 9.8 | 2017-08-03 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. T… |
CVE-2017-11392 | High | 8.8 | 2017-08-03 | Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vul… |
CVE-2017-11391 | High | 8.8 | 2017-08-03 | Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vul… |
CVE-2017-11382 | High | 7.5 | 2017-08-03 | Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installatio… |
CVE-2017-11390 | High | 7.5 | 2017-08-02 | XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure. Formerly ZDI-CAN-470… |
CVE-2017-11389 | Critical | 9.8 | 2017-08-02 | Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing dir… |
CVE-2017-11388 | High | 8.8 | 2017-08-02 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided string… |
CVE-2017-11387 | High | 7.5 | 2017-08-02 | Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can ch… |