CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial of service via local access.
SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status registers potentially allowing information disclosure or a denial of service condition.
A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information in a particular log file that could be used to bypass authentication on vulnerable installations.
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes.
Antivirus_+_security_2019, Internet_security_2019, Maximum_security_2019, Premium_security_2019, Ransom_buster, Control_manager, Endpoint_sensor, Im_security, Mobile_security, Officescan
2018-02-27
N/A
8.8 HIGH
XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Antivirus_+_security_2019, Internet_security_2019, Maximum_security_2019, Premium_security_2019, Ransom_buster, Control_manager, Endpoint_sensor, Im_security, Mobile_security, Officescan
2018-02-27
N/A
8.8 HIGH
XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Antivirus_+_security_2019, Internet_security_2019, Maximum_security_2019, Premium_security_2019, Ransom_buster, Control_manager, Endpoint_sensor, Im_security, Mobile_security, Officescan
2018-03-01
N/A
8.8 HIGH
TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Antivirus_+_security_2019, Internet_security_2019, Maximum_security_2019, Premium_security_2019, Ransom_buster, Control_manager, Endpoint_sensor, Im_security, Mobile_security, Officescan
2018-02-27
N/A
8.8 HIGH
GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Antivirus_+_security_2019, Internet_security_2019, Maximum_security_2019, Premium_security_2019, Ransom_buster, Control_manager, Endpoint_sensor, Im_security, Mobile_security, Officescan
2018-02-27
N/A
8.8 HIGH
A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.