712 matches found
CVE-2024-1801 Progress Telerik Reporting Local Deserialization Vulnerability
In Progress® Telerik® Reporting versions prior to 2024 Q1 18.0.24.130, a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability...
CVE-2024-1801
Progress Software Telerik Reporting ObjectReader deserialization vulnerability (CVE-2024-1801 / CVE-2024-1856) enables remote code execution through untrusted data. Affected: Telerik Reporting versions prior to 2024 Q1 (18.0.24.130). Attack requires user interaction (e.g., visiting a malicious pa...
CVE-2024-1800
Progress Telerik Report Server CVE-2024-1800 describes an insecure deserialization vulnerability in versions prior to 2024 Q1 (10.0.24.130) that enables remote code execution. The issue arises from deserialization flaws in the server, allowing an attacker to trigger code execution remotely. Sever...
CVE-2024-1800 Progress Telerik Report Server Deserialization
In Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130, a remote code execution attack is possible through an insecure deserialization vulnerability...
CVE-2024-1800 Progress Telerik Report Server Deserialization
In Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130, a remote code execution attack is possible through an insecure deserialization vulnerability...
PT-2024-3990
Name of the Vulnerable Software and Affected Versions Progress Telerik Report Server versions 2024 Q1 10.0.24.305 or earlier Description The issue is related to an authentication bypass vulnerability in Progress Telerik Report Server, allowing an unauthenticated attacker to gain access to...
PT-2024-3249 · Progress · Progress Telerik Reporting
Name of the Vulnerable Software and Affected Versions: Progress Telerik Reporting versions prior to 2024 Q1 18.0.24.130 Description: The issue is related to an insecure deserialization vulnerability in the ObjectReader class of Progress Telerik Reporting, which can be exploited by a remote threat...
Progress Software Telerik Report Server Code Issue Vulnerability
Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...
PT-2024-2324 · Progress · Progress Telerik Report Server
Name of the Vulnerable Software and Affected Versions: Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130 Description: A remote code execution attack is possible through an insecure deserialization vulnerability in the Progress® Telerik® Report Server. This vulnerability is...
Progress Software Telerik Report Server Code Issue Vulnerability
Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...
Progress Software Telerik Report Server Code Issue Vulnerability
Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...
CVE-2024-0833
In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...
CVE-2024-0833
In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...
CVE-2024-0832
In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...
CVE-2024-0219
In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...
CVE-2024-0219
In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...
Privilege escalation
In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...
Privilege escalation
In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...
Privilege escalation
In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...
CVE-2024-0833
Affected software : Telerik Test Studio (installer component) prior to v2023.3.1330. Vulnerability : privilege elevation where a lower-privileged user can manipulate the installation package in environments with an existing Test Studio install to gain elevated OS privileges. Impact :, as per CVSS...