Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19648 State: PUBLISHED Published: 2019-12-09T00:37:00 Last Updated: 2024-08-05T02:25:12.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, resulting in Denial of Service (application crash) or potential code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VirusTotal/yara/issues/1178 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/ - https:/
project.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/
CVE ID: CVE-2019-19649 State: PUBLISHED Published: 2019-12-11T17:57:41 Last Updated: 2024-08-05T02:25:11.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/applications_manager/release-notes.html - https://gitlab.com/eLeN3Re/CVE-2019-19649
CVE ID: CVE-2019-19650 State: PUBLISHED Published: 2019-12-11T17:40:20 Last Updated: 2024-08-05T02:25:11.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/applications_manager/release-notes.html - https://gitlab.com/eLeN3Re/CVE-2019-19650
CVE ID: CVE-2019-19659 State: PUBLISHED Published: 2020-02-10T15:48:55 Last Updated: 2024-08-05T02:25:12.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19659.md
CVE ID: CVE-2019-19660 State: PUBLISHED Published: 2020-02-10T15:39:24 Last Updated: 2024-08-05T02:25:12.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://raw.githubusercontent.com/harshit-shukla/CVE/master/CVE-2019-19660.md
CVE ID: CVE-2019-19661 State: PUBLISHED Published: 2020-02-10T17:29:52 Last Updated: 2024-08-05T02:25:12.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19661%20%28Un-authenticated%29.md
CVE ID: CVE-2019-19662 State: PUBLISHED Published: 2020-02-10T16:49:17 Last Updated: 2024-08-05T02:25:11.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19662.md
CVE ID: CVE-2019-19663 State: PUBLISHED Published: 2020-02-10T15:54:34 Last Updated: 2024-08-05T02:25:12.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19663.md
CVE ID: CVE-2019-19664 State: PUBLISHED Published: 2020-02-10T16:44:15 Last Updated: 2024-08-05T02:25:11.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server Web settings at RAPR/WebSettingsGeneralSet.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19664.md
CVE ID: CVE-2019-19665 State: PUBLISHED Published: 2020-02-10T16:00:03 Last Updated: 2024-08-05T02:25:12.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19665.md
CVE ID: CVE-2019-19666 State: PUBLISHED Published: 2020-02-10T17:38:58 Last Updated: 2024-08-05T02:25:12.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can create/update event notices via RAPR/EventNoticesSet.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19666.md
CVE ID: CVE-2019-19667 State: PUBLISHED Published: 2020-02-10T17:45:35 Last Updated: 2024-08-05T02:25:12.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whitelist or block any IP address via RAPR/BlockedClients.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19667.md
CVE ID: CVE-2019-19668 State: PUBLISHED Published: 2020-02-10T18:03:50 Last Updated: 2024-08-05T02:25:12.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19668.md
CVE ID: CVE-2019-19669 State: PUBLISHED Published: 2020-02-10T17:59:24 Last Updated: 2024-08-05T02:25:11.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1. This could allow an attacker to delete, create, and update the upload forms via RAPR/TriggerServerFunction.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19669.md
CVE ID: CVE-2019-19670 State: PUBLISHED Published: 2020-02-10T17:54:08 Last Updated: 2024-08-05T02:25:12.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacement, etc. via ExtraHTTPHeader to RAPR/WebSettingsGeneralSet.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/harshit-shukla/CVE - https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19670.md
CVE ID: CVE-2019-19675 State: PUBLISHED Published: 2019-12-17T14:42:22 Last Updated: 2024-08-05T02:25:12.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Locally-authenticated-user-can-bypass-File-and-Folder-Security-by-leveraging-an-unspecified-attack-vector
CVE ID: CVE-2019-19676 State: PUBLISHED Published: 2020-03-18T21:55:53 Last Updated: 2024-08-05T02:25:12.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC. Additional Analyst Notes: - CVE Program Container: References:
The attacker could gain remote access to the user's PC. Additional Analyst Notes: - CVE Program Container: References: - https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-csv-injection.html
CVE ID: CVE-2019-19677 State: PUBLISHED Published: 2020-03-18T22:27:14 Last Updated: 2024-08-05T02:25:12.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: arxes-tolina 3.0.0 allows User Enumeration. Additional Analyst Notes: - CVE Program Container: References: - https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-user-disclosure-via-application-function.html
CVE ID: CVE-2019-19678 State: PUBLISHED Published: 2019-12-09T15:31:17 Last Updated: 2024-08-05T02:25:12.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test issue. Additional Analyst Notes: - CVE Program Container: References: - https://jira.xpand-it.com/browse/XRAY-4692
CVE ID: CVE-2019-19679 State: PUBLISHED Published: 2019-12-09T15:30:59 Last Updated: 2024-08-05T02:25:12.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue. Additional Analyst Notes: - CVE Program Container: References: - https://jira.xpand-it.com/browse/XRAY-4692
CVE ID: CVE-2019-19680 State: PUBLISHED Published: 2020-01-13T20:06:25 Last Updated: 2024-08-05T02:25:12.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 and 8.14.2 respectively, allows attackers to bypass protection mechanisms (related to extensions, MIME types, virus detection, and journal entries for transmitted files) by sending malformed (not RFC compliant) multipart email. Additional Analyst Notes: - CVE Program Container: References: - https://www.proofpoint.com/us/security/cve-2019-19680 - https://www.proofpoint.com/us/security/secur
iner: References: - https://www.proofpoint.com/us/security/cve-2019-19680 - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0001
CVE ID: CVE-2019-19681 State: PUBLISHED Published: 2019-12-26T15:59:27 Last Updated: 2024-08-05T02:25:12.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vulnerability as it is described is not in fact an actual vulnerability. They state that to be able to create alert commands, you need to have admin rights. They also state that the extended ACL system can disable access to specific sections of the configuration, such as defining new alert comm
at the extended ACL system can disable access to specific sections of the configuration, such as defining new alert commands Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40k4m1ll0/remote-code-execution-vulnerability-in-pandorafms-7-x-8ce55d4b1d5a - https://pandorafms.com/blog/pandora-fms-vulnerability/ - https://k4m1ll0.com/cve-2019-19681.html
CVE ID: CVE-2019-19682 State: PUBLISHED Published: 2019-12-09T16:58:24 Last Updated: 2024-08-05T02:25:12.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: nopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop.Web\Areas\Admin\Controllers\NewsController.cs and \Presentation\Nop.Web\Areas\Admin\Controllers\BlogController.cs via Body or Full to Admin/News/NewsItemEdit/[id] Admin/Blog/BlogPostEdit/[id]. NOTE: the vendor reportedly considers this a "feature" because the affected components are an HTML content editor. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klezVirus/cves/tree/master/NopCommerce/Cro
onal Analyst Notes: - CVE Program Container: References: - https://github.com/klezVirus/cves/tree/master/NopCommerce/Cross-Site-Scripting
CVE ID: CVE-2019-19683 State: PUBLISHED Published: 2019-12-09T16:57:13 Last Updated: 2024-08-05T02:25:12.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFilemanService.cs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klezVirus/cves/tree/master/NopCommerce/Privilege%20Escalation%20via%20Path%20Traversal
CVE ID: CVE-2019-19684 State: PUBLISHED Published: 2019-12-09T16:58:12 Last Updated: 2024-08-05T02:25:12.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to upload a crafted Facebook Auth plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klezVirus/cves/tree/master/NopCommerce/Privilege%20Escalation%20via%20Plugin%20Upload
CVE ID: CVE-2019-19685 State: PUBLISHED Published: 2019-12-09T16:58:02 Last Updated: 2024-08-05T02:25:12.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klezVirus/cves/tree/master/NopCommerce/Cross-Site-Request-Forgery
CVE ID: CVE-2019-19687 State: PUBLISHED Published: 2019-12-09T17:14:14 Last Updated: 2024-08-05T02:25:12.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enforce_scope is false. Users with a role on a project are able to view any other users' credentials, which could (for example) leak sign-on information for Time-based One Time Passwords (TOTP). Deployments with enforce_scope set to false are affected. (There will be a slight performance impact for the list credentials API once this is
ce_scope set to false are affected. (There will be a slight performance impact for the list credentials API once this issue is fixed.) Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/keystone/+bug/1855080 - https://review.opendev.org/#/c/697355/ - https://review.opendev.org/#/c/697611/ - https://review.opendev.org/#/c/697731/ - https://security.openstack.org/ossa/OSSA-2019-006.html - http://www.openwall.com/lists/oss-security/2019/12/11/8 - https://access.redhat.com/errata/RHSA-2019:4358 - https://usn.ubuntu.com/4262-1/
CVE ID: CVE-2019-19688 State: PUBLISHED Published: 2019-12-18T18:30:15 Last Updated: 2024-08-05T02:25:12.367Z Vendors: Trend Micro Products: Trend Micro HouseCall for Home Networks Problem Types: Privilege Escalation Description: A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited allowing an attacker to place a malicious DLL file into the application directory and elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-21674
CVE ID: CVE-2019-19689 State: PUBLISHED Published: 2019-12-18T18:30:16 Last Updated: 2024-08-05T02:25:12.207Z Vendors: Trend Micro Products: Trend Micro HouseCall for Home Networks Problem Types: DLL Hijack Description: Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-21674
CVE ID: CVE-2019-19690 State: PUBLISHED Published: 2019-12-18T18:30:16 Last Updated: 2024-08-05T02:25:12.487Z Vendors: Trend Micro Products: Trend Micro Mobile Security for Android (Consumer) Problem Types: Protection Bypass Description: Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124037.aspx
CVE ID: CVE-2019-19691 State: PUBLISHED Published: 2019-12-20T04:05:21 Last Updated: 2024-08-05T02:25:12.132Z Vendors: Trend Micro Products: Trend Micro Apex One and OfficeScan Problem Types: Credential Exposure Description: A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000159568
CVE ID: CVE-2019-19692 State: PUBLISHED Published: 2019-12-20T04:05:22 Last Updated: 2024-08-05T02:25:12.156Z Vendors: Trend Micro Products: Trend Micro Apex Central Problem Types: XSS Description: Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console. Note that the Japanese version of the product is NOT affected. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000159569
CVE ID: CVE-2019-19693 State: PUBLISHED Published: 2019-12-20T04:05:22 Last Updated: 2024-08-05T02:25:12.384Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: DoS Description: The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to disclose sensitive information or to create a denial-of-service condition on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-19-1025/ - https://esuppor
otes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-19-1025/ - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124043.aspx
CVE ID: CVE-2019-19694 State: PUBLISHED Published: 2020-02-20T22:50:23 Last Updated: 2024-08-05T02:25:12.385Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: DoS Description: The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (DoS) attack in which a malicious actor could manipulate a key file at a certain time during the system startup process to disable the product's malware protection functions or the entire product completely.. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124056.aspx - https://jvn.jp/en/jp
er: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124056.aspx - https://jvn.jp/en/jp/JVN02921757/ - https://esupport.trendmicro.com/support/vb/solution/ja-jp/1124058.aspx - https://jvn.jp/jp/JVN02921757/
CVE ID: CVE-2019-19695 State: PUBLISHED Published: 2019-12-24T08:25:11 Last Updated: 2024-08-05T02:25:12.189Z Vendors: Trend Micro Products: Trend Micro Antivirus for Mac Problem Types: Privilege Escalation Description: A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below) could potentially allow an attacker to create a symbolic link to a target file and modify it. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124055.aspx
CVE ID: CVE-2019-19696 State: PUBLISHED Published: 2020-01-17T23:45:24 Last Updated: 2024-08-05T02:25:12.319Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: RootCA Access Description: A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspx - https://jvn.jp/en/jp/JVN3718363
ces: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspx - https://jvn.jp/en/jp/JVN37183636/index.html - https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1124091.aspx - https://jvn.jp/jp/JVN37183636/index.html
CVE ID: CVE-2019-19697 State: PUBLISHED Published: 2020-01-17T23:45:25 Last Updated: 2024-08-05T02:25:12.336Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Arbitrary Code Execution Description: An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administrator privileges on the target machine in order to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/
oit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124090.aspx - http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-SECURITY-BYPASS-PROTECTED-SERVICE-TAMPERING.txt - https://seclists.org/bugtraq/2020/Jan/29