trendmicro Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/trendmicro/ Sun, 26 Feb 2023 06:50:38 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png trendmicro Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/trendmicro/ 32 32 CVE-2018-6218 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6218/ Sun, 26 Feb 2023 06:50:38 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6218/ A DLL Hijacking vulnerability in Trend Micro’s User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.

The post CVE-2018-6218 appeared first on CVE Vulnerability.

]]> A DLL Hijacking vulnerability in Trend Micro’s User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.

The post CVE-2018-6218 appeared first on CVE Vulnerability.

]]> CVE-2018-3600 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3600/ Sun, 26 Feb 2023 06:49:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3600/ A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations.

The post CVE-2018-3600 appeared first on CVE Vulnerability.

]]> A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations.

The post CVE-2018-3600 appeared first on CVE Vulnerability.

]]> CVE-2018-3601 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3601/ Sun, 26 Feb 2023 06:49:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3601/ A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations.

The post CVE-2018-3601 appeared first on CVE Vulnerability.

]]> A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations.

The post CVE-2018-3601 appeared first on CVE Vulnerability.

]]> CVE-2018-3602 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3602/ Sun, 26 Feb 2023 06:49:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3602/ An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3602 appeared first on CVE Vulnerability.

]]> An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3602 appeared first on CVE Vulnerability.

]]> CVE-2018-3603 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3603/ Sun, 26 Feb 2023 06:49:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3603/ A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3603 appeared first on CVE Vulnerability.

]]> A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3603 appeared first on CVE Vulnerability.

]]> CVE-2018-3604 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3604/ Sun, 26 Feb 2023 06:49:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3604/ GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3604 appeared first on CVE Vulnerability.

]]> GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3604 appeared first on CVE Vulnerability.

]]> CVE-2018-3605 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3605/ Sun, 26 Feb 2023 06:49:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3605/ TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3605 appeared first on CVE Vulnerability.

]]> TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3605 appeared first on CVE Vulnerability.

]]> CVE-2018-3606 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3606/ Sun, 26 Feb 2023 06:49:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3606/ XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3606 appeared first on CVE Vulnerability.

]]> XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3606 appeared first on CVE Vulnerability.

]]> CVE-2018-3607 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3607/ Sun, 26 Feb 2023 06:49:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3607/ XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3607 appeared first on CVE Vulnerability.

]]> XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

The post CVE-2018-3607 appeared first on CVE Vulnerability.

]]> CVE-2018-18327 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-18327/ Sun, 26 Feb 2023 06:47:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-18327/ A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6eDC offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged […]

The post CVE-2018-18327 appeared first on CVE Vulnerability.

]]> A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6eDC offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2018-18327 appeared first on CVE Vulnerability.

]]>