|
210601
|
9.8 |
CRITICAL
Network
|
avast
|
antivirus
|
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to bypass intended access restrictions on ta…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-10867
|
2024-11-21 13:56 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210602
|
7.5 |
HIGH
Network
|
avast
|
antivirus
|
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to enumerate the network interfaces and acce…
|
CWE-326
Inadequate Encryption Strength
|
CVE-2020-10866
|
2024-11-21 13:56 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210603
|
7.5 |
HIGH
Network
|
avast
|
antivirus
|
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to make arbitrary changes to the Components …
|
CWE-829
Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2020-10865
|
2024-11-21 13:56 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210604
|
6.5 |
MEDIUM
Network
|
avast
|
antivirus
|
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to trigger a reboot via RPC from a Low Integ…
|
NVD-CWE-noinfo
|
CVE-2020-10864
|
2024-11-21 13:56 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210605
|
7.5 |
HIGH
Network
|
avast
|
antivirus
|
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to trigger a shutdown via RPC from a Low Int…
|
NVD-CWE-noinfo
|
CVE-2020-10863
|
2024-11-21 13:56 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210606
|
7.8 |
HIGH
Local
|
avast
|
antivirus
|
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Local Privilege Escalation (LPE) …
|
NVD-CWE-noinfo
|
CVE-2020-10862
|
2024-11-21 13:56 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210607
|
7.5 |
HIGH
Network
|
avast
|
antivirus
|
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Arbitrary File Deletion from Avas…
|
NVD-CWE-noinfo
|
CVE-2020-10861
|
2024-11-21 13:56 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210608
|
7.5 |
HIGH
Network
|
avast
|
antivirus
|
An issue was discovered in Avast Antivirus before 20. An Arbitrary Memory Address Overwrite vulnerability in the aswAvLog Log Library results in Denial of Service of the Avast Service (AvastSvc.exe).
|
CWE-787
Out-of-bounds Write
|
CVE-2020-10860
|
2024-11-21 13:56 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210609
|
8.8 |
HIGH
Network
|
fasterxml debian netapp oracle
|
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server webcenter_portal ret…
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-11113
|
2024-11-21 13:56 |
2020-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210610
|
8.8 |
HIGH
Network
|
fasterxml debian netapp oracle
|
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy…
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commo…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-11112
|
2024-11-21 13:56 |
2020-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|