Skip to main content
CVE-2020-15216 Sep 29, 16:15 MEDIUM PATCH This Month

In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Jwt Attack Fedora Goxmldsig Fedoraproject
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2020-25775 Sep 29, 00:15 MEDIUM This Month

The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate. Rated medium severity (CVSS 6.3). No vendor patch available.

Information Disclosure Race Condition Trend Micro Antivirus 2020 Internet Security 2020 +2
NVD
CVSS 3.1
6.3
EPSS
0.3%
CVE-2020-25772 Sep 29, 00:15 MEDIUM This Month

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Trend Micro Apex One
NVD
CVSS 3.1
5.5
EPSS
1.3%
CVE-2020-25771 Sep 29, 00:15 MEDIUM This Month

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Trend Micro Apex One
NVD
CVSS 3.1
5.5
EPSS
1.3%
CVE-2020-25770 Sep 29, 00:15 MEDIUM This Month

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Trend Micro Apex One
NVD
CVSS 3.1
5.5
EPSS
1.3%
CVE-2020-24565 Sep 29, 00:15 MEDIUM This Month

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Trend Micro Apex One
NVD
CVSS 3.1
5.5
EPSS
1.3%
CVE-2020-24564 Sep 29, 00:15 MEDIUM This Month

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Trend Micro Apex One
NVD
CVSS 3.1
5.5
EPSS
1.3%
CVE-2020-25774 Sep 29, 00:15 MEDIUM This Month

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Trend Micro Apex One
NVD
CVSS 3.1
4.3
EPSS
2.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy