1074 matches found
CVE-2020-25289
The CVE-2020-25289 entry describes a local file-write vulnerability in the Avast SecureLine VPN service (pre-5.6.4982.470). The issue arises from an Object Manager symbolic link in the log directory that has weak permissions, allowing local users to write to arbitrary files. Some sources corrobor...
Avast Antivirus Password Management Vulnerability
Avast Antivirus is a suite of antivirus software from the Czech company Avast. version 20.1.5069.562 of Avast Antivirus contains a password management vulnerability that could be exploited by an attacker to continue storing entered passwords in the Windows main memory...
CVE-2020-15024
An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...
CVE-2020-15024
An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...
CVE-2020-15024
An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...
CVE-2020-15024
Avast Antivirus 20.1.5069.562 Password Manager contains a vulnerability in the Login Password feature where the entered password remains in Windows main memory after logout or Lock Vault, creating a potential information-disclosure risk. The issue affects the Password Manager component; root caus...
CVE-2020-15024
An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...
PT-2020-14126 · Avast · Avast Antivirus
Name of the Vulnerable Software and Affected Versions: Avast Antivirus version 20.1.5069.562 Description: A security issue was found in the Login Password feature of the Password Manager component. When a user logs out or performs a Lock Vault operation, the entered password remains stored in...
mapsorigin.ns1.ff.avast.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1238474 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-13657
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files...
Privilege escalation
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files...
CVE-2020-13657
CVE-2020-13657 affects Avast Free Antivirus and AVG AntiVirus Free prior to 20.4. The root cause is improper handling of hard links that enables a local user to elevate privileges and potentially control arbitrary files. Affected component scope is the antivirus suites for Windows as described in...
CVE-2020-13657
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files...
mapsorigin.ns1.ff.avast.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1159687 Security Researcher marwanali2012 Helped patch 2 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting mapsorigin.ns1.ff.avast.com website and its users. Following coordinated and responsible vulnerability disclosure...
mapsorigin.ns1.ff.avast.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1158176 Security Researcher marwanali2012 Helped patch 2 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting mapsorigin.ns1.ff.avast.com website and its users. Following coordinated and responsible vulnerability disclosure...
Avast Antivirus Input Validation Error Vulnerability (CNVD-2020-22015)
Avast Antivirus is a suite of antivirus software from the Czech company Avast. An input validation error vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. An attacker can exploit this vulnerability to shut down the system with a...
Unspecified Vulnerability in Avast Antivirus (CNVD-2020-22017)
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in versions prior to Avast Antivirus 20. The vulnerability can be exploited to make arbitrary changes to the Components section of the...
Avast Antivirus Arbitrary File Deletion Vulnerability (CNVD-2020-22013)
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. The vulnerability can be exploited by an attacker to delete arbitrary files from the Avast...
Avast Antivirus Encryption Problem Vulnerability
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. The vulnerability can be exploited by an attacker to enumerate network interfaces and access...
Avast Antivirus Denial of Service Vulnerability
Avast antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswAvLog Log inventory in previous versions of Avast Antivirus 20. An attacker could exploit this vulnerability to cause a denial of service...