Lucene search
+L

193 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/05/31 12:00 a.m.•36 views

Progress Software Telerik Reporting Register Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Progress Software Telerik Reporting. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the Register method. The issue results from the...

9.8CVSS8.6AI score0.97482EPSS
SaveExploits14References1
CNNVD
CNNVD
•added 2024/05/29 12:00 a.m.•13 views

Progress Software Telerik Report Server security vulnerabilities

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server version 10.0.24.305 and prior versions, which originates from a vulnerability that can be...

9.8CVSS8.5AI score0.97482EPSS
SaveExploits14References3
Zero Day Initiative
Zero Day Initiative
•added 2024/05/29 12:00 a.m.•55 views

Progress Software Telerik Reporting ValidateMetadaUri XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Progress Software Telerik Reporting. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within...

6.5CVSS5.8AI score0.007EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/28 12:00 a.m.•34 views

Progress Software WhatsUp Gold HttpContentActiveController Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Progress Software WhatsUp Gold. Authentication is required to exploit this vulnerability. The specific flaw exists within the HttpContentActiveController class. The issue results from the lac...

7.1CVSS5.8AI score0.00378EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•21 views

Progress Software Telerik Report Server security vulnerabilities

Progress Software Telerik Report Server is an enterprise-level report management and distribution solution from Progress Software. A security vulnerability exists in versions prior to Progress Software Telerik Report Server 2024 Q2 18.1.24.514. An attacker could exploit the vulnerability to...

8.6CVSS6AI score0.00273EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•19 views

Progress Software Telerik Report Server security vulnerabilities

Progress Software Telerik Report Server is an enterprise-level report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server version 2024 Q1 10.0.24.305 and prior versions. An attacker could exploit the vulnerability...

5.3CVSS5.9AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•17 views

Progress Software WhatsUp Gold code-related vulnerabilities

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A code issue vulnerability exists in Progress Software WhatsUp Gold versions prior to...

5.3CVSS5.5AI score0.00426EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•20 views

Progress Software WhatsUp Gold code-related vulnerabilities

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A code issue vulnerability exists in Progress Software WhatsUp Gold versions prior to...

5.4CVSS6.8AI score0.00378EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2024/04/25 12:00 a.m.•40 views

Progress Software Telerik Report Server ObjectReader Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Telerik Report Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the ObjectReader class. The issue results from the lack of proper...

8.8CVSS9.1AI score0.34247EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
•added 2024/04/25 12:00 a.m.•28 views

Progress Software Telerik Reporting ObjectReader Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Telerik Reporting. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS8AI score0.01129EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/04/25 12:00 a.m.•27 views

Progress Software Telerik Reporting ObjectReader Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Telerik Reporting. Authentication is required to exploit this vulnerability. The specific flaw exists within the ObjectReader class. The issue results from the lack of proper...

7.2CVSS8.1AI score0.01129EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•25 views

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

9.9CVSS7.8AI score0.34247EPSS
SaveExploits8References3
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•24 views

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

8.8CVSS7.8AI score0.01129EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2024/03/11 6:28 a.m.•86 views

Proof-of-Concept Exploit Released for Progress Software OpenEdge Vulnerability

Technical specifics and a proof-of-concept PoC exploit have been made available for a recently disclosed critical security flaw in Progress Software OpenEdge Authentication Gateway and AdminServer, which could be potentially exploited to bypass authentication protections. Tracked as CVE-2024-1403...

10CVSS8.2AI score0.03272EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/02/21 12:00 a.m.•23 views

Progress Software WS_FTP Server Security Vulnerability

Progress Software WSFTP Server is an effective and highly manageable FTP server from Progress Software, USA. A security vulnerability exists in Progress Software WSFTP Server versions prior to 8.8.5 that stems from the presence of a cross-site scripting vulnerability...

7.5CVSS6.1AI score0.0045EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/14 12:00 a.m.•25 views

Progress Software WhatsUp Gold Cross-Site Scripting Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability previously existed in Progress Software WhatsUp Gold version...

7.6CVSS5.8AI score0.00513EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/14 12:00 a.m.•24 views

Progress Software WhatsUp Gold Cross-Site Scripting Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability previously existed in Progress Software WhatsUp Gold version...

7.6CVSS5.8AI score0.00513EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/14 12:00 a.m.•21 views

Progress Software WhatsUp Gold Cross-Site Scripting Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability previously existed in Progress Software WhatsUp Gold version...

7.6CVSS5.8AI score0.00513EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/14 12:00 a.m.•20 views

Progress Software WhatsUp Gold Access Control Error Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability previously existed in Progress Software WhatsUp Gold version...

7.5CVSS7AI score0.008EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/14 12:00 a.m.•24 views

Progress Software WhatsUp Gold Access Control Error Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability previously existed in Progress Software WhatsUp Gold version...

5.9CVSS7AI score0.00554EPSS
SaveExploits0References3
Rows per page
Query Builder