Show filters
164 Total Results
Displaying 51-60 of 164
Sort by:
Attacker Value
Unknown
CVE-2020-8463
Disclosure Date: December 17, 2020 (last updated February 22, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths.
0
Attacker Value
Unknown
CVE-2020-27010
Disclosure Date: December 17, 2020 (last updated February 22, 2025)
A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product in a manner separate from the similar CVE-2020-8462.
0
Attacker Value
Unknown
CVE-2020-8466
Disclosure Date: December 17, 2020 (last updated February 22, 2025)
A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password.
0
Attacker Value
Unknown
CVE-2020-8462
Disclosure Date: December 17, 2020 (last updated February 22, 2025)
A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product.
0
Attacker Value
Unknown
CVE-2020-8464
Disclosure Date: December 17, 2020 (last updated February 22, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access.
0
Attacker Value
Unknown
CVE-2020-8465
Disclosure Date: December 17, 2020 (last updated February 22, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass (CVE-2020-8461) and authentication bypass (CVE-2020-8464) to execute code as user root.
0
Attacker Value
Unknown
CVE-2020-8461
Disclosure Date: December 17, 2020 (last updated February 22, 2025)
A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token.
0
Attacker Value
Unknown
CVE-2020-25704
Disclosure Date: December 02, 2020 (last updated February 22, 2025)
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.
0
Attacker Value
Unknown
CVE-2020-28579
Disclosure Date: November 18, 2020 (last updated February 22, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges.
0
Attacker Value
Unknown
CVE-2020-28580
Disclosure Date: November 18, 2020 (last updated February 22, 2025)
A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.
0
