Browse CVEs

HIGH 7.2 CVE-2016-5840EPSS 8% hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbit… Deep Discovery Inspector No fix yet Fix from $1,9502016-06-30 HIGH 7.4 CVE-2016-3664 Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application login server, which allows man-in… Mobile Security after 3.1 Fix from $1,9502016-05-23 MEDIUM 5.0 CVE-2015-3326 Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web … Scanmail Mitigation only Fix from $1,6002015-05-14 HIGH 7.5 CVE-2012-2998EPSS 6% SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remot… Control Manager after 5.5 Fix from $1,9502012-09-28 HIGH 10.0 CVE-2011-5001EPSS 64% Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control… Control Manager after 5.5 Fix from $1,9502011-12-25 HIGH 10.0 CVE-2008-3865EPSS 6% Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC… Internet Security 2007 Patch available Fix from $1,9502009-01-21 MEDIUM 5.0 CVE-2008-3864 The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro Office… Internet Security 2007 Patch available Fix from $1,6002009-01-21 HIGH 9.3 CVE-2008-2435EPSS 7% Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers… Housecall Mitigation only Fix from $1,9502008-12-23 HIGH 9.3 CVE-2008-2434EPSS 7% The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to download an arbitrary librar… Housecall Mitigation only Fix from $1,9502008-12-23 HIGH 9.3 CVE-2008-5545 Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malwar… Trend Micro Antivirus Mitigation only Fix from $1,9502008-12-12 HIGH 10.0 CVE-2006-5268EPSS 7% Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related to obtainin… Serverprotect Mitigation only Fix from $1,9502008-11-17 HIGH 10.0 CVE-2006-5269EPSS 8% Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code vi… Serverprotect Mitigation only Fix from $1,9502008-11-17 HIGH 10.0 CVE-2007-0072EPSS 8% Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code vi… Serverprotect Mitigation only Fix from $1,9502008-11-17 HIGH 10.0 CVE-2007-0073EPSS 8% Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code vi… Serverprotect No fix yet Fix from $1,9502008-11-17 HIGH 10.0 CVE-2007-0074EPSS 8% Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code vi… Serverprotect Mitigation only Fix from $1,9502008-11-17 HIGH 10.0 CVE-2008-0012EPSS 7% Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code vi… Serverprotect No fix yet Fix from $1,9502008-11-17 HIGH 10.0 CVE-2008-0013EPSS 7% Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code vi… Serverprotect Mitigation only Fix from $1,9502008-11-17 HIGH 10.0 CVE-2008-0014EPSS 7% Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code vi… Serverprotect Mitigation only Fix from $1,9502008-11-17 HIGH 10.0 CVE-2008-3862EPSS 18% Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 … Officescan Patch available Fix from $1,9502008-10-23 HIGH 10.0 CVE-2008-4402EPSS 6% Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allo… Officescan Patch available Fix from $1,9502008-10-03 MEDIUM 5.0 CVE-2008-2439EPSS 20% Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro Offic… Officescan Patch available Fix from $1,6002008-10-03 MEDIUM 5.0 CVE-2008-4403 The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cau… Officescan Mitigation only Fix from $1,6002008-10-03 HIGH 10.0 CVE-2008-2437EPSS 7% Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Cli… Client Server Messaging Security Patch available Fix from $1,9502008-09-16 HIGH 9.3 CVE-2008-3364EPSS 33% Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OSCE) Web-D… Officescan No fix yet Fix from $1,9502008-07-30 MEDIUM 6.4 CVE-2008-1365EPSS 51% Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, a… Officescan Corporate Edition after 8.0_patch2_build1189 Fix from $1,6002008-03-17 MEDIUM 5.0 CVE-2008-1366 Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause… Officescan Corporate Edition after 8.0_patch2_build1189 Fix from $1,6002008-03-17 HIGH 10.0 CVE-2007-6507EPSS 37% SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.… Serverprotect Mitigation only Fix from $1,9502007-12-20 HIGH 7.2 CVE-2007-6386 Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Sec… Trend Micro Antivirus Plus Antispyware Patch available Fix from $1,9502007-12-15 MEDIUM 6.6 CVE-2007-4277 The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.50… Pc Cillin Internet Security 2007 after 8.500 Fix from $1,6002007-10-30 HIGH 10.0 CVE-2007-4731EPSS 10% Stack-based buffer overflow in the TMregChange function in TMReg.dll in Trend Micro ServerProtect before 5.58 Security Patch 4 allows remote attacker… Serverprotect after 5.58_security_patch_3 Fix from $1,9502007-09-12