Trend Micro records
108 published records for vendor trend micro.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 7 · 6.5%
- Pre-auth RCE
- 47
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer21
- CWE-20 Improper Input Validation5
- CWE-264 Permissions, Privileges, and Access Controls4
- CWE-399 Resource Management Errors4
- CWE-287 Improper Authentication3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
108 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
63This week | CVE-2007-2508Weaponized | Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to executetrend micro · serverprotect · CWE-119 | Critical10.0 | — | 77.1% | May 8, 2007 |
62This week | CVE-2007-1070Weaponized | Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, trend micro · serverprotect | Critical10.0 | — | 72.9% | Feb 21, 2007 |
59Plan | CVE-2011-5001Weaponized | Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micrtrend micro · control manager · CWE-119 | Critical10.0 | — | 64.3% | Dec 24, 2011 |
51Plan | CVE-2007-6507Weaponized | SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from trend micro · serverprotect · CWE-264 | Critical10.0 | — | 36.6% | Dec 20, 2007 |
48Plan | CVE-2007-0325Weaponized | Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in Oftrend micro · client-server-messaging security · CWE-119 | Critical9.3 | — | 35.3% | Feb 20, 2007 |
47Plan | CVE-2008-3364Proof of concept | Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OStrend micro · officescan · CWE-119 | Critical9.3 | — | 32.8% | Jul 30, 2008 |
46Plan | CVE-2008-3862No exploit | Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, andtrend micro · officescan · CWE-119 | Critical10.0 | — | 18.4% | Oct 23, 2008 |
45Plan | CVE-2001-0679Proof of concept | A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to ttrend micro · interscan viruswall | Critical10.0 | — | 16.0% | Nov 8, 1999 |
44Plan | CVE-2007-4218No exploit | Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 atrend micro · serverprotect · CWE-20 | Critical10.0 | — | 13.0% | Aug 22, 2007 |
43Plan | CVE-2001-0432Proof of concept | Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackertrend micro · interscan viruswall | Critical10.0 | — | 10.7% | Jul 2, 2001 |
43Plan | CVE-2007-4219No exploit | Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerPtrend micro · serverprotect · CWE-189 | Critical10.0 | — | 10.4% | Aug 22, 2007 |
43Plan | CVE-2007-4731No exploit | Stack-based buffer overflow in the TMregChange function in TMReg.dll in Trend Micro ServerProtect before 5.58 Security Patch 4 allows remotetrend micro · serverprotect · CWE-119 | Critical10.0 | — | 9.5% | Sep 11, 2007 |
43Plan | CVE-2006-5269No exploit | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrartrend micro · serverprotect · CWE-119 | Critical10.0 | — | 8.6% | Nov 17, 2008 |
43Plan | CVE-2007-0073No exploit | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrartrend micro · serverprotect · CWE-119 | Critical10.0 | — | 8.6% | Nov 17, 2008 |
43Plan | CVE-2007-0072No exploit | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrartrend micro · serverprotect · CWE-119 | Critical10.0 | — | 8.6% | Nov 17, 2008 |
43Plan | CVE-2007-0074No exploit | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrartrend micro · serverprotect · CWE-119 | Critical10.0 | — | 8.6% | Nov 17, 2008 |
42Plan | CVE-2006-5268No exploit | Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related totrend micro · serverprotect · CWE-287 | Critical10.0 | — | 7.2% | Nov 17, 2008 |
42Plan | CVE-2008-0013No exploit | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrartrend micro · serverprotect · CWE-119 | Critical10.0 | — | 6.6% | Nov 17, 2008 |
42Plan | CVE-2008-0014No exploit | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrartrend micro · serverprotect · CWE-119 | Critical10.0 | — | 6.6% | Nov 17, 2008 |
42Plan | CVE-2008-0012No exploit | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrartrend micro · serverprotect · CWE-119 | Critical10.0 | — | 6.6% | Nov 17, 2008 |
42Plan | CVE-2008-2437No exploit | Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1trend micro · client-server-messaging security · CWE-119 | Critical10.0 | — | 6.6% | Sep 16, 2008 |
42Plan | CVE-2008-3865No exploit | Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Compotrend micro · internet security 2007 · CWE-119 | Critical10.0 | — | 6.4% | Jan 21, 2009 |
42Plan | CVE-2007-3454No exploit | Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to etrend micro · officescan · CWE-119 | Critical10.0 | — | 5.5% | Jun 26, 2007 |
42Plan | CVE-2008-4402No exploit | Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build trend micro · officescan · CWE-119 | Critical10.0 | — | 5.5% | Oct 3, 2008 |
42Plan | CVE-2007-2533No exploit | Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary trend micro · serverprotect | Critical10.0 | — | 5.3% | May 8, 2007 |
- CVE-2007-250863This week
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute
CriticalCVSS 10.0WeaponizedEPSS 77%trend micro · serverprotectMay 8, 2007
- CVE-2007-107062This week
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62,
CriticalCVSS 10.0WeaponizedEPSS 72%trend micro · serverprotectFeb 21, 2007
- CVE-2011-500159Plan
Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micr
CriticalCVSS 10.0WeaponizedEPSS 64%trend micro · control managerDec 24, 2011
- CVE-2007-650751Plan
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from
CriticalCVSS 10.0WeaponizedEPSS 36%trend micro · serverprotectDec 20, 2007
- CVE-2007-032548Plan
Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in Of
CriticalCVSS 9.3WeaponizedEPSS 35%trend micro · client-server-messaging securityFeb 20, 2007
- CVE-2008-336447Plan
Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OS
CriticalCVSS 9.3Proof of conceptEPSS 32%trend micro · officescanJul 30, 2008
- CVE-2008-386246Plan
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and
CriticalCVSS 10.0No exploitEPSS 18%trend micro · officescanOct 23, 2008
- CVE-2001-067945Plan
A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to t
CriticalCVSS 10.0Proof of conceptEPSS 16%trend micro · interscan viruswallNov 8, 1999
- CVE-2007-421844Plan
Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 a
CriticalCVSS 10.0No exploitEPSS 13%trend micro · serverprotectAug 22, 2007
- CVE-2001-043243Plan
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attacker
CriticalCVSS 10.0Proof of conceptEPSS 10%trend micro · interscan viruswallJul 2, 2001
- CVE-2007-421943Plan
Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerP
CriticalCVSS 10.0No exploitEPSS 10%trend micro · serverprotectAug 22, 2007
- CVE-2007-473143Plan
Stack-based buffer overflow in the TMregChange function in TMReg.dll in Trend Micro ServerProtect before 5.58 Security Patch 4 allows remote
CriticalCVSS 10.0No exploitEPSS 9%trend micro · serverprotectSep 11, 2007
- CVE-2006-526943Plan
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar
CriticalCVSS 10.0No exploitEPSS 8%trend micro · serverprotectNov 17, 2008
- CVE-2007-007343Plan
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar
CriticalCVSS 10.0No exploitEPSS 8%trend micro · serverprotectNov 17, 2008
- CVE-2007-007243Plan
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar
CriticalCVSS 10.0No exploitEPSS 8%trend micro · serverprotectNov 17, 2008
- CVE-2007-007443Plan
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar
CriticalCVSS 10.0No exploitEPSS 8%trend micro · serverprotectNov 17, 2008
- CVE-2006-526842Plan
Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related to
CriticalCVSS 10.0No exploitEPSS 7%trend micro · serverprotectNov 17, 2008
- CVE-2008-001342Plan
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar
CriticalCVSS 10.0No exploitEPSS 6%trend micro · serverprotectNov 17, 2008
- CVE-2008-001442Plan
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar
CriticalCVSS 10.0No exploitEPSS 6%trend micro · serverprotectNov 17, 2008
- CVE-2008-001242Plan
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar
CriticalCVSS 10.0No exploitEPSS 6%trend micro · serverprotectNov 17, 2008
- CVE-2008-243742Plan
Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1
CriticalCVSS 10.0No exploitEPSS 6%trend micro · client-server-messaging securitySep 16, 2008
- CVE-2008-386542Plan
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Compo
CriticalCVSS 10.0No exploitEPSS 6%trend micro · internet security 2007Jan 21, 2009
- CVE-2007-345442Plan
Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to e
CriticalCVSS 10.0No exploitEPSS 5%trend micro · officescanJun 26, 2007
- CVE-2008-440242Plan
Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build
CriticalCVSS 10.0No exploitEPSS 5%trend micro · officescanOct 3, 2008
- CVE-2007-253342Plan
Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary
CriticalCVSS 10.0No exploitEPSS 5%trend micro · serverprotectMay 8, 2007