Vulnerabilities > Trendmicro > Low

DATE CVE VULNERABILITY TITLE RISK
2020-11-09 CVE-2020-27693 Use of Password Hash With Insufficient Computational Effort vulnerability in Trendmicro Interscan Messaging Security Virtual Appliance 8.5.1.1516/9.0/9.1
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that is considered outdated.
local
low complexity
trendmicro CWE-916
2.1
2020-10-30 CVE-2020-27015 Information Exposure Through an Error Message vulnerability in Trendmicro Antivirus 2020
Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland.
local
low complexity
trendmicro CWE-209
2.1
2020-10-14 CVE-2020-25778 Information Exposure vulnerability in Trendmicro Antivirus 2019/2020
Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory.
local
low complexity
trendmicro CWE-200
2.1
2020-10-14 CVE-2020-27013 Unspecified vulnerability in Trendmicro Antivirus 2020
Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data.
local
low complexity
trendmicro
3.6
2020-10-13 CVE-2020-25779 Unspecified vulnerability in Trendmicro Antivirus 2020
Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature.
local
low complexity
trendmicro
2.1
2020-09-29 CVE-2020-24564 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product.
local
low complexity
trendmicro CWE-125
2.1
2020-09-29 CVE-2020-24565 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product.
local
low complexity
trendmicro CWE-125
2.1
2020-09-29 CVE-2020-25770 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product.
local
low complexity
trendmicro CWE-125
2.1
2020-09-29 CVE-2020-25771 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product.
local
low complexity
trendmicro CWE-125
2.1
2020-09-29 CVE-2020-25772 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product.
local
low complexity
trendmicro CWE-125
2.1