CVSS: 5.5EPSS: 0%CPEs: 39EXPL: 0CVE-2021-25252
https://notcve.org/view.php?id=CVE-2021-25252
03 Mar 2021 — Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file. La API Virus Scan (VSAPI) y el Advanced Threat Scan Engine (ATSE) de Trend Micro, son susceptibles a una vulnerabilidad de agotamiento de la memoria que puede conllevar a una denegación de servicio o a un congelamiento del sistema si es explotada por un atacante usando ... • https://success.trendmicro.com/solution/000285675 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2018-15365
https://notcve.org/view.php?id=CVE-2018-15365
28 Sep 2018 — A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. An attacker must be an authenticated user in order to exploit the vulnerability. Una vulnerabilidad de Cross-Site Scripting (XSS) reflejado en Trend Micro Deep Discovery Inspector en versiones 3.85 y anteriores podría permitir que un atacante omita la protección CSRF y lleve a cabo un ataque en instala... • https://github.com/nixwizard/CVE-2018-15365 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 14%CPEs: 3EXPL: 1CVE-2016-5840 – Trend Micro Deep Discovery hotfix_upload.cgi filename Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2016-5840
22 Jun 2016 — hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header. hotfix_upload.cgi en Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81) y 3.8 SP2 (3.82) permite a administradores remotos ejecutar código arbitrario a través de metacaracteres de shell en el parámetro filename de la cabecera Content-Disposition. This vul... • https://www.exploit-db.com/exploits/40180 • CWE-20: Improper Input Validation •
CVSS: 6.1EPSS: 7%CPEs: 9EXPL: 1CVE-2015-2872 – Trend Micro Deep Discovery 3.7.1096 Cross Site Scripting
https://notcve.org/view.php?id=CVE-2015-2872
18 Aug 2015 — Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web script or HTML via (1) crafted input to index.php that is processed by certain Internet Explorer 7 configurations or (2) crafted input to the widget feature. Múltiples vulnerabilidades de XSS en Trend Micro Deep ... • https://packetstorm.news/files/id/133246 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 3%CPEs: 9EXPL: 1CVE-2015-2873 – Trend Micro Deep Discovery 3.7.1096 Authentication Bypass
https://notcve.org/view.php?id=CVE-2015-2873
18 Aug 2015 — Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct request to the (1) system log URL, (2) whitelist URL, or (3) blacklist URL. Vulnerabilidad en Trend Micro Deep Discovery Inspector (DDI) en el aparato Deep Discovery Threat con software anterior a 3.5.1477, 3.6.x en v... • https://packetstorm.news/files/id/133245 • CWE-425: Direct Request ('Forced Browsing') •