Archive
26 June 2023
Vulnerabilities first published on this day (UTC), newest first.
95 results · Feed
-
Low 2.7
The contour service was not checking that users had permission to create an analysis for a given dataset
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.
-
Critical 9.8
CVE-2023-30945
Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker co…
-
Unscored —
A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a part…
-
Unscored —
An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could …
-
Unscored —
An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could …
-
Unscored —
An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could …
-
Unscored —
An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow…
-
Unscored —
An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow…
-
Unscored —
Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site …
-
Unscored —
Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site …
-
Unscored —
A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated att…
-
Unscored —
A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker…
-
Unscored —
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loc…
-
Unscored —
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loc…
-
Unscored —
An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticat…
-
Unscored —
An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticat…
-
Unscored —
Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site …
-
Unscored —
Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site …
-
Unscored —
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks…
-
Unscored —
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks…
-
Unscored —
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks…
-
Unscored —
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks…
-
Unscored —
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks…
-
Unscored —
Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated use…
-
Unscored —
Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated use…
-
Unscored —
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to e…
-
Unscored —
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to e…
-
Unscored —
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to …
-
Unscored —
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to …
-
Unscored —
Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote us…
-
Unscored —
Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote us…
-
Unscored —
A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an auth…
-
Unscored —CVE-2023-32521 EPSS 67%
A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow…
-
Unscored —
A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local at…
-
Unscored —
Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow …
-
Medium 6.3
Unauthorized users can manipulate a dashboard created by an administrator in DataEase
DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions a missing authorization check allows unauthorized users to manipulate a dashboard created by the administrator. This vulner…
-
High 8.8
Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap …
-
Unscored —
Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to insta…
-
High 8.8CVE-2023-3420 EPSS 56%
Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap cor…
-
High 8.1
Unauthorized users can delete applications in DataEase
DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions Unauthorized users can delete an application erroneously. This vulnerability has been fixed in version 1.18.8. Users are ad…