Lucene search
+L

712 matches found

Cvelist
Cvelist
added 2024/03/20 1:12 p.m.40 views

CVE-2024-1801 Progress Telerik Reporting Local Deserialization Vulnerability

In Progress® Telerik® Reporting versions prior to 2024 Q1 18.0.24.130, a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability...

7.7CVSS7.9AI score0.01129EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/20 1:12 p.m.82 views

CVE-2024-1801

Progress Software Telerik Reporting ObjectReader deserialization vulnerability (CVE-2024-1801 / CVE-2024-1856) enables remote code execution through untrusted data. Affected: Telerik Reporting versions prior to 2024 Q1 (18.0.24.130). Attack requires user interaction (e.g., visiting a malicious pa...

7.8CVSS7.9AI score0.01129EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/03/20 1:11 p.m.227 views

CVE-2024-1800

Progress Telerik Report Server CVE-2024-1800 describes an insecure deserialization vulnerability in versions prior to 2024 Q1 (10.0.24.130) that enables remote code execution. The issue arises from deserialization flaws in the server, allowing an attacker to trigger code execution remotely. Sever...

9.9CVSS9.7AI score0.40375EPSS
SaveIn wildExploits8References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/20 1:11 p.m.31 views

CVE-2024-1800 Progress Telerik Report Server Deserialization

In Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130, a remote code execution attack is possible through an insecure deserialization vulnerability...

9.9CVSS7.7AI score0.40375EPSS
SaveExploits8References2
Cvelist
Cvelist
added 2024/03/20 1:11 p.m.35 views

CVE-2024-1800 Progress Telerik Report Server Deserialization

In Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130, a remote code execution attack is possible through an insecure deserialization vulnerability...

9.9CVSS10AI score0.40375EPSS
SaveExploits8References2
Positive Technologies
Positive Technologies
added 2024/03/20 12:00 a.m.23 views

PT-2024-3990

Name of the Vulnerable Software and Affected Versions Progress Telerik Report Server versions 2024 Q1 10.0.24.305 or earlier Description The issue is related to an authentication bypass vulnerability in Progress Telerik Report Server, allowing an unauthenticated attacker to gain access to...

9.9CVSS5.9AI score0.97482EPSS
SaveExploits14References62
Positive Technologies
Positive Technologies
added 2024/03/20 12:00 a.m.10 views

PT-2024-3249 · Progress · Progress Telerik Reporting

Name of the Vulnerable Software and Affected Versions: Progress Telerik Reporting versions prior to 2024 Q1 18.0.24.130 Description: The issue is related to an insecure deserialization vulnerability in the ObjectReader class of Progress Telerik Reporting, which can be exploited by a remote threat...

8.8CVSS8AI score0.01129EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.12 views

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

9.9CVSS7.8AI score0.40375EPSS
SaveExploits8References3
Positive Technologies
Positive Technologies
added 2024/03/20 12:00 a.m.8 views

PT-2024-2324 · Progress · Progress Telerik Report Server

Name of the Vulnerable Software and Affected Versions: Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130 Description: A remote code execution attack is possible through an insecure deserialization vulnerability in the Progress® Telerik® Report Server. This vulnerability is...

9.9CVSS9.9AI score0.97482EPSS
SaveExploits14References37
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.10 views

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

8.8CVSS7.8AI score0.01129EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.12 views

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

8.8CVSS7.8AI score0.01129EPSS
SaveExploits0References3
NVD
NVD
added 2024/01/31 4:15 p.m.37 views

CVE-2024-0833

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...

7.8CVSS7.5AI score0.00158EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/31 4:15 p.m.8 views

CVE-2024-0833

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...

7.8CVSS5.7AI score0.00158EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/31 4:15 p.m.17 views

CVE-2024-0832

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

7.8CVSS5.7AI score0.00193EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/31 4:15 p.m.8 views

CVE-2024-0219

In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...

7.8CVSS5.7AI score0.00189EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/31 4:15 p.m.31 views

CVE-2024-0219

In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...

7.8CVSS7.5AI score0.00189EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/31 4:15 p.m.23 views

Privilege escalation

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...

4.3CVSS7AI score0.00158EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2024/01/31 4:15 p.m.26 views

Privilege escalation

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

4.3CVSS7AI score0.00193EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2024/01/31 4:15 p.m.23 views

Privilege escalation

In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...

4.3CVSS7AI score0.00189EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/01/31 3:15 p.m.55 views

CVE-2024-0833

Affected software : Telerik Test Studio (installer component) prior to v2023.3.1330. Vulnerability : privilege elevation where a lower-privileged user can manipulate the installation package in environments with an existing Test Studio install to gain elevated OS privileges. Impact :, as per CVSS...

7.8CVSS7.5AI score0.00158EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder