Threats Tagged 'cwe-477'
View all threats tagged with 'cwe-477'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-477'
Click on any threat for detailed analysis and mitigation recommendations
The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included despite being deprecated. It might allow a remote attacker to steal user credentials. Join the discussion | CVE Database V5 | 02/26/2026, 07:56:10 UTC Added: 02/26/2026, 08:11:32 UTC |
0 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method. Join the discussion | CVE Database V5 | 06/17/2025, 20:28:14 UTC Added: 06/17/2025, 20:34:58 UTC |
0 An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations. Join the discussion | CVE Database V5 | 06/17/2025, 20:28:07 UTC Added: 06/17/2025, 20:34:58 UTC |
0 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability. Join the discussion | CVE Database V5 | 06/17/2025, 20:27:52 UTC Added: 06/17/2025, 20:34:58 UTC |
0 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a different method. Join the discussion | CVE Database V5 | 06/17/2025, 20:27:44 UTC Added: 06/17/2025, 20:34:58 UTC |
0 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method. Join the discussion | CVE Database V5 | 06/17/2025, 20:27:37 UTC Added: 06/17/2025, 20:34:58 UTC |
0 An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49219 but is in a different method. Join the discussion | CVE Database V5 | 06/17/2025, 17:43:23 UTC Added: 06/17/2025, 17:49:29 UTC |
0 An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method. Join the discussion | CVE Database V5 | 06/17/2025, 17:43:12 UTC Added: 06/17/2025, 17:49:29 UTC |
Showing 1 to 8 of 8 results