Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-11-01	CVE-2019-18653	Cross-site Scripting vulnerability in Avast Antivirus 19.3.2369 A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to execute JavaScript code via an SSID Name. network low complexity avast CWE-79	6.1
2019-07-18	CVE-2019-11230	Link Following vulnerability in Avast Antivirus In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. local low complexity avast CWE-59	4.4