32 matches found
EUVD-2018-7330
Malware in sbrugna...
EUVD-2020-24452
Malware in sbrugna...
EUVD-2016-2414
Malware in sbrugna...
EUVD-2021-6853
Malicious code in bioql PyPI...
EUVD-2021-7033
Malicious code in bioql PyPI...
The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices allows a perpetrator to trigger a service failure.
The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices is related to memory release errors during HTML file syntax analysis. Exploiting this vulnerability can allow an attacker to cause service interruptions...
CVE-2021-1566: Improper Following of a Certificate's Chain of Trust
A vulnerability in the Cisco Advanced Malware Protection AMP for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance ESA and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers...
Cisco Advanced Malware Protection 信任管理问题漏洞
Cisco Advanced Malware Protection AMP for Endpoints for Windows is a Windows-based endpoint security solution from Cisco. The product mainly features advanced threat prevention, monitoring and response. Cisco Advanced Malware Protection has a security vulnerability that allows an unauthenticated,...
CVE-2021-1386
A vulnerability in the dynamic link library DLL loading mechanism in Cisco Advanced Malware Protection AMP for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this...
CVE-2021-1386: Uncontrolled Search Path Element
A vulnerability in the dynamic link library DLL loading mechanism in Cisco Advanced Malware Protection AMP for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this...
PT-2021-2566
Name of the Vulnerable Software and Affected Versions: Cisco Advanced Malware Protection for Endpoints Windows Connector versions affected versions not specified ClamAV for Windows versions affected versions not specified Immunet versions affected versions not specified Description: The issue is...
Cisco Advanced Malware Protection for Endpoints and Immunet for Windows DLL Hijacking Vulnerability
A vulnerability in the loading mechanism of specific DLLs of Cisco Advanced Malware Protection AMP for Endpoints for Windows and Immunet for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need valid...
CVE-2021-1280: Uncontrolled Search Path Element
A vulnerability in the loading mechanism of specific DLLs of Cisco Advanced Malware Protection AMP for Endpoints for Windows and Immunet for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need valid...
Cisco Advanced Malware Protection Code Issue Vulnerability
Cisco Advanced Malware Protection AMP for Endpoints for Windows is a Windows-based endpoint security solution from Cisco. The product focuses on advanced threat prevention, monitoring, and response. A code issue vulnerability exists in specific DLLs of Cisco Advanced Malware Protection that allow...
Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability
A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection AMP in Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow an unauthenticated remote attacker to exhaust resources on an affected device. The vulnerability is due to insufficient...
The vulnerability of Cisco AMP’s security tools for end devices stems from insufficient checks on dynamically loaded modules, allowing attackers to execute arbitrary code with AMP service privileges.
The vulnerability of Cisco AMP’s security tools for end devices stems from insufficient checks on dynamically loaded modules. Exploiting this vulnerability could allow attackers to execute arbitrary code with AMP service privileges...
CVE-2019-1932 Cisco Advanced Malware Protection for Endpoints Windows Command Injection Vulnerability
A vulnerability in Cisco Advanced Malware Protection AMP for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit thi...
CVE-2019-1932: Insufficient Verification of Data Authenticity
A vulnerability in Cisco Advanced Malware Protection AMP for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit thi...
Cisco Advanced Malware Protection for Endpoints for Windows Command Injection Vulnerability
Cisco Advanced Malware Protection AMP for Endpoints for Windows is a Windows-based endpoint security solution from Cisco. The product mainly has advanced threat prevention, monitoring and response features. A command injection vulnerability exists in Cisco?AMP for Endpoints 6.2.3.10807030519 and...
CVE-2018-15452
A vulnerability in the DLL loading component of Cisco Advanced Malware Protection AMP for Endpoints on Windows could allow an authenticated, local attacker to disable system scanning services or take other actions to prevent detection of unauthorized intrusions. To exploit this vulnerability, the...