Threat Discovery Appliance (Trendmicro) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2017-04-28. Vendor: Trendmicro.
CVEs of Threat Discovery Appliance
- CVE-2016-8585 - CVSS 8.8 (high), 2017-04-28: admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root…
- CVE-2016-8588 - CVSS 7.3 (high), 2017-04-28: The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via shell…
- CVE-2016-8591 - CVSS 8.8 (high), 2017-04-28: log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user…
- CVE-2016-8584 - CVSS 9.8 (critical), 2017-04-28: Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by…
- CVE-2016-8587 - CVSS 7.3 (high), 2017-04-28: dlp_policy_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via an…
- CVE-2016-8590 - CVSS 8.8 (high), 2017-04-28: log_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root…
- CVE-2016-8593 - CVSS 8.8 (high), 2017-04-28: Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute…
- CVE-2016-8586 - CVSS 8.8 (high), 2017-04-28: detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as…
- CVE-2016-8589 - CVSS 8.8 (high), 2017-04-28: log_query_dae.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root…
- CVE-2016-8592 - CVSS 8.8 (high), 2017-04-28: log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root…
- CVE-2016-7552 - CVSS 9.8 (critical), 2017-04-12: On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to…
- CVE-2016-7547 - CVSS 9.8 (critical), 2017-04-12: A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.
