EUVD-2023-44309

Malicious code in bioql PyPI...

PT-2024-15385

Name of the Vulnerable Software and Affected Versions Trellix Anti-Malware Engine versions prior to January 2024 release Description A symbolic link manipulation issue allows an authenticated local user to potentially gain an escalation of privileges. This is achieved by adding an entry to the...

CVE-2023-3665

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code...

CVE-2023-3665

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code...

Code injection

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code...

CVE-2023-3665

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code...

CVE-2023-3665

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code...

CVE-2023-3665

CVE-2023-3665 concerns a code injection flaw in Trellix Endpoint Security (ENS) up to version 10.7.0. The root cause is that a local attacker can set environment variables to disable the AMSI component, resulting in denial of service and potential arbitrary code execution. The materials confirm a...

PT-2023-25653 · Trellix · Trellix Ens

Name of the Vulnerable Software and Affected Versions: Trellix ENS versions 10.7.0 and earlier Description: A code injection issue allows a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code. Recommendations:...

CVE-2023-3665: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code...