450 matches found
CVE-2019-11396
An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...
Design/Logic Flaw
An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...
CVE-2019-11396
CVE-2019-11396 affects Avira Free Security Suite 10. The issue involves permissive access rights on the SoftwareUpdater folder and its configuration, which are incompatible with privileged file manipulation performed by the product. An unprivileged user can create files (via abuse of SwuConfig.js...
CVE-2019-11396
An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...
'Karkoff' Is the New 'DNSpionage' With Selective Targeting Strategy
The cybercriminal group behind the infamous DNSpionage malware campaign has been found running a new sophisticated operation that infects selected victims with a new variant of the DNSpionage malware. First uncovered in November last year, the DNSpionage attacks used compromised sites and crafted...
Microsoft’s Latest Patch Hoses Some Antivirus Software
Microsoft’s April 9 security update is bogging down systems running antivirus software packages made by McAfee, Avast, ArcaBit, Avira and Sophos. According to Microsoft, the company’s April Patch Tuesday security update is causing some systems to have slow startup times, sluggish performance or...
April 9, 2019—KB4493471 (Monthly Rollup)
None None...
April 9, 2019—KB4493451 (Monthly Rollup)
None None...
April 9, 2019—KB4493458 (Security-only update)
None None...
April 9, 2019—KB4493446 (Monthly Rollup)
None None...
April 9, 2019—KB4493448 (Security-only update)
None None...
April 9, 2019—KB4493467 (Security-only update)
None None...
April 9, 2019—KB4493450 (Security-only update)
None None...
shop.avira.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-494189 Description| Value ---|--- Affected Website:| shop.avira.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on ISO...
avira-s.cleverbridge.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-485329 Description| Value ---|--- Affected Website:| avira-s.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...
avira-cgn.cleverbridge.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-485218 Description| Value ---|--- Affected Website:| avira-cgn.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
Avira Antivirus Remote Code Execution Vulnerability
Avira Antivirus engine is an antivirus engine from the German company Little Red Umbrella Avira. A security vulnerability exists in versions of Avira Antivirus engine prior to 8.3.36.60. A remote attacker can exploit this vulnerability to execute code with NT AUTHORITY\SYSTEM privileges, resultin...
Integer overflow
Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow...
CVE-2016-10402
Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow...
CVE-2016-10402
Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow...