TD
Product
Threat Discovery Appliance
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 9Medium 0Low 0
Watch
Add Threat Discovery Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8584 | 9.8 | Apr 28 | Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by guessing the value Affected: through 2.6.1062 |
| CVE-2016-7552 | 9.8 | Apr 12 | On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary… Affected: 2.6.1062 |
| CVE-2016-7547 | 9.8 | Apr 12 | A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface Affected: 2.6.1062 |
| CVE-2016-8593 | 8.8 | Apr 28 | Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via a… Affected: through 2.6.1062 |
| CVE-2016-8592 | 8.8 | Apr 28 | log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062 |
| CVE-2016-8591 | 8.8 | Apr 28 | log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062 |
| CVE-2016-8590 | 8.8 | Apr 28 | log_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062 |
| CVE-2016-8589 | 8.8 | Apr 28 | log_query_dae.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062 |
| CVE-2016-8586 | 8.8 | Apr 28 | detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via… Affected: through 2.6.1062 |
| CVE-2016-8585 | 8.8 | Apr 28 | admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062 |
| CVE-2016-8588 | 7.3 | Apr 28 | The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the… Affected: through 2.6.1062 |
| CVE-2016-8587 | 7.3 | Apr 28 | dlp_policy_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via an archive file containing a… Affected: through 2.6.1062 |
Showing 12