Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
AviraSoftware Updater

3 matches found

CVE
CVE•added 2020/05/05 9:18 p.m.•73 views

CVE-2020-12463

Avira Software Updater prior to 2.0.6.27476 is affected by an elevation of privilege due to improper handling of file hard links. This allows local users to take control of arbitrary files. CVSSv3.1 base score 7.8 (LOCAL, HIGH impact on confidentiality/integrity/availability); no exploit details ...

7.8CVSS7.6AI score0.00429EPSS
CVE
CVE•added 2019/10/10 3:58 p.m.•50 views

CVE-2019-17449

CVE-2019-17449 affects Avira Software Updater, prior to version 2.0.6.21094, which is vulnerable to a DLL side-loading attack via DLL preloading. The vulnerability is described as a local issue where exploiting it would require administrator privileges and could elevate to SYSTEM privileges (vend...

6.7CVSS6.6AI score0.00398EPSS
CVE
CVE•added 2019/08/29 7:6 p.m.•42 views

CVE-2019-11396

CVE-2019-11396 affects Avira Free Security Suite 10. The issue involves permissive access rights on the SoftwareUpdater folder and its configuration, which are incompatible with privileged file manipulation performed by the product. An unprivileged user can create files (via abuse of SwuConfig.js...

7.8CVSS7.5AI score0.00569EPSS