https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:22:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-02945 bdu:2021-02945 https://cve.radiocsirt.org/vuln/bdu:2021-02945 https://cve.radiocsirt.org/vuln/cnvd-2019-39362 cnvd-2019-39362 https://cve.radiocsirt.org/vuln/cnvd-2019-39362 https://cve.radiocsirt.org/vuln/euvd-2026-257098 EUVD-2026-257098 https://cve.radiocsirt.org/vuln/euvd-2026-257098 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18187 <p>Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.</p> <p>Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-18187 https://cve.radiocsirt.org/vuln/ghsa-cjq6-9jh6-x2vg <p>Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.</p> <p>Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-cjq6-9jh6-x2vg https://cve.radiocsirt.org/vuln/gsd-2019-18187 gsd-2019-18187 https://cve.radiocsirt.org/vuln/gsd-2019-18187 https://cve.radiocsirt.org/vuln/jvndb-2019-011088 <p>Trend Micro OfficeScan contains a directory traversal vulnerability (CWE-22). If this vulnerability is exploited, an authenticated user on the administrative console of the affected product may upload an arbitrary zip file to the specific folder, then extract and execute it. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Trend Micro Incorporated coordinated under the Information Security Early Warning Partnership.</p> <p>Trend Micro OfficeScan contains a directory traversal vulnerability (CWE-22). If this vulnerability is exploited, an authenticated user on the administrative console of the affected product may upload an arbitrary zip file to the specific folder, then extract and execute it. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Trend Micro Incorporated coordinated under the Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2019-011088