Vulnerabilities in Trend Micro
315 resultsCVE-2019-14687—A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrarEPSS 1.6%CVE-2021-25244—An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various piecEPSS 1.5%CVE-2021-25245—An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various piecEPSS 1.5%CVE-2021-36742HIGHA improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.EPSS 1.5%KEVCVE-2019-14684—A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrarEPSS 1.5%CVE-2019-19690—Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass EPSS 1.5%CVE-2019-9490—A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose adminEPSS 1.5%CVE-2021-31521—Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting (XSS) vulnerability in tEPSS 1.4%CVE-2018-18332—A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key fileEPSS 1.4%CVE-2018-18331—A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alterEPSS 1.4%CVE-2020-15604—An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allEPSS 1.4%CVE-2018-10508—A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissioEPSS 1.3%CVE-2020-25774—A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red informatioEPSS 1.3%CVE-2017-14090—A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.EPSS 1.3%CVE-2018-10507—A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScaEPSS 1.3%CVE-2019-15627—Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to avaEPSS 1.3%CVE-2020-25777—Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass theEPSS 1.3%CVE-2018-10353—A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sEPSS 1.3%CVE-2018-6222—Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulatEPSS 1.2%CVE-2020-15603—An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow EPSS 1.2%