trendmicro Vulnerability Advisory Catalog

Total 567 security vulnerabilities recorded for trendmicro software and firmware.

← Back to All Vendors
Component: apex_central

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to ...

📅 2023-06-26
CVSS 6.1 Dossier →
Component: apex_central

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to ...

📅 2023-06-26
CVSS 6.1 Dossier →
Component: apex_central

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection t...

📅 2023-06-26
CVSS 8.8 Dossier →
Component: apex_central

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection t...

📅 2023-06-26
CVSS 8.8 Dossier →
Component: mobile_security

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affect...

📅 2023-06-26
CVSS 8.8 Dossier →
Component: mobile_security

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affect...

📅 2023-06-26
CVSS 8.8 Dossier →
Component: mobile_security

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affec...

📅 2023-06-26
CVSS 6.5 Dossier →
Component: mobile_security

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affec...

📅 2023-06-26
CVSS 6.5 Dossier →
Component: mobile_security

Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and...

📅 2023-06-26
CVSS 8.8 Dossier →
Component: mobile_security

Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and...

📅 2023-06-26
CVSS 8.8 Dossier →
Component: mobile_security

A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote attacker to de...

📅 2023-06-26
CVSS 8.1 Dossier →
CVE-2023-32521 CRITICAL
Component: mobile_security

A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote atta...

📅 2023-06-26
CVSS 9.1 Dossier →
Component: apex_one

A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delet...

📅 2023-06-26
CVSS 5.5 Dossier →
Component: antivirus\+_security_2021

Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific e...

📅 2023-06-26
CVSS 7.8 Dossier →
Component: trend_micro_endpoint_encryption

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to a...

📅 2023-03-22
CVSS 6.8 Dossier →
Component: txone_stellarone

TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, fal...

📅 2023-03-22
CVSS 8.8 Dossier →
Component: apex_one

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific...

📅 2023-03-10
CVSS 7.8 Dossier →
Component: apex_one

An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the pro...

📅 2023-03-10
CVSS 6.7 Dossier →
Component: apex_one

A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original...

📅 2023-03-10
CVSS 7.8 Dossier →
Component: apex_one

A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected ...

📅 2023-03-10
CVSS 7.8 Dossier →
Component: apex_one

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitra...

📅 2023-03-10
CVSS 7.8 Dossier →
CVE-2023-25143 CRITICAL
Component: apex_one

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execut...

📅 2023-03-10
CVSS 9.8 Dossier →
CVE-2023-0587 CRITICAL
Component: apex_one

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent ...

📅 2023-02-01
CVSS 9.1 Dossier →
Component: maximum_security_2022

A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific ...

📅 2023-01-20
CVSS 7.0 Dossier →
Page 7 of 24 (567 Total Records)