Browse CVEs

MEDIUM 6.5 CVE-2018-6219 An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with certain ty… Email Encryption Gateway No fix yet Fix from $1,6002018-03-15 HIGH 8.1 CVE-2018-3609EPSS 21% A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user t… Interscan Messaging Security Virtual Appliance No fix yet Fix from $1,9502018-02-16 HIGH 7.0 CVE-2018-6218 A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system. Deep Security Mitigation only Fix from $1,9502018-02-16 HIGH 7.5 CVE-2017-14087EPSS 8% A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attac… Officescan No fix yet Fix from $1,9502017-10-06 HIGH 8.8 CVE-2017-11391EPSS 62% Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary c… Interscan Messaging Security Virtual Appliance Mitigation only Fix from $1,9502017-08-03 HIGH 8.8 CVE-2017-11392EPSS 34% Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary c… Interscan Messaging Security Virtual Appliance Mitigation only Fix from $1,9502017-08-03 MEDIUM 6.1 CVE-2017-8801 Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked … Officescan Mitigation only Fix from $1,6002017-05-05 HIGH 8.8 CVE-2017-6398EPSS 54% An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user can execute a terminal comman… Interscan Messaging Security Virtual Appliance No fix yet Fix from $1,9502017-03-14 HIGH 8.8 CVE-2016-6270EPSS 6% The handle_certificate function in /vmi/manager/engine/management/commands/apns_worker.py in Trend Micro Virtual Mobile Infrastructure before 5.1 all… Virtual Mobile Infrastructure No fix yet Fix from $1,9502017-01-30 MEDIUM 6.1 CVE-2016-1226 Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via… Internet Security Mitigation only Fix from $1,6002016-06-19 MEDIUM 6.5 CVE-2016-1225 Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors. Internet Security No fix yet Fix from $1,6002016-06-19 MEDIUM 6.1 CVE-2016-1224 CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to … Worry Free Business Security Mitigation only Fix from $1,6002016-06-19 MEDIUM 5.3 CVE-2016-1223 Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 all… Officescan Mitigation only Fix from $1,6002016-06-19 CRITICAL 9.8 CVE-2016-3987EPSS 22% The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDef… Password Manager No fix yet Fix from $2,3002016-04-12 MEDIUM 6.8 CVE-2012-2996 Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allo… Interscan Messaging Security Suite No fix yet Fix from $1,6002012-09-17 MEDIUM 6.2 CVE-2010-5179 Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and ex… Internet Security 2010 Mitigation only Fix from $1,6002012-08-25 HIGH 7.2 CVE-2009-0686 The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows l… Internet Security No fix yet Fix from $1,9502009-04-01 MEDIUM 6.0 CVE-2009-0613 Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass intended pe… Interscan Web Security Suite Mitigation only Fix from $1,6002009-02-17