Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

684 matches found

ATTACKERKB
ATTACKERKB•added 2017/08/23 12:0 a.m.•44 views

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

9.8CVSS6.5AI score0.75709EPSS
SaveIn wildExploits5References4
Positive Technologies
Positive Technologies•added 2017/08/22 12:0 a.m.•8 views

PT-2017-3938

Name of the Vulnerable Software and Affected Versions Telerik UI for ASP.NET AJAX versions prior to R1 2017 Telerik UI for ASP.NET AJAX R2 versions prior to R2 2017 SP2 Description The issue is related to weak encryption in RadAsyncUpload, which allows remote attackers to perform arbitrary file...

10CVSS10AI score0.83476EPSS
SaveExploits8References23
CERT
CERT•added 2017/07/25 12:0 a.m.•1311 views

Telerik Web UI contains cryptographic weakness

Overview The Telerik Web UI, versions R2 2017 2017.2.503 and prior, is vulnerable to a cryptographic weakness which an attacker can exploit to extract encryption keys. Description CWE-326: Inadequate Encryption Strength - CVE-2017-9248The Telerik.Web.UI.dll is vulnerable to a cryptographic...

9.8CVSS9.2AI score0.75098EPSS
SaveExploits5References4
CNVD
CNVD•added 2017/07/07 12:0 a.m.•19 views

Multiple Vulnerabilities in ASP.NET AJAX and Sitefinity Progress Telerik UI

ASP.NET AJAX is a control for ASP.NET; Sitefinity is an open source platform for building enterprise websites and intranets. Progress Telerik UI is a UI user interface for ASP.NET controls that handles AJAX, developed by American Telerik. A security vulnerability in Telerik.Web.UI.dll for Progres...

9.8CVSS6.5AI score0.75098EPSS
SaveExploits5References1
NVD
NVD•added 2017/07/03 7:29 p.m.•31 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

9.8CVSS9.4AI score0.75098EPSS
SaveExploits5References5
Prion
Prion•added 2017/07/03 7:29 p.m.•28 views

Default credentials

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

7.5CVSS7.1AI score0.75098EPSS
SaveExploits5References4Affected Software2
OSV
OSV•added 2017/07/03 7:29 p.m.•4 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

9.8CVSS5.9AI score0.75098EPSS
SaveExploits5References5
CVE
CVE•added 2017/07/03 7:0 p.m.•1372 views

CVE-2017-9248

CVE-2017-9248 affects Progress Telerik UI for ASP.NET AJAX (and Sitefinity) prior to R2 2017 SP1 / 10.0.6412.0. The vulnerability lies in Telerik.Web.UI.dll handling of the Telerik.Web.UI.DialogParametersEncryptionKey and the MachineKey, enabling an attacker to defeat cryptographic protection and...

9.8CVSS9.2AI score0.75098EPSS
SaveIn wildExploits5References5Affected Software2
Vulnrichment
Vulnrichment•added 2017/07/03 7:0 p.m.•13 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

6.9AI score0.75098EPSS
SaveExploits5References4
Cvelist
Cvelist•added 2017/07/03 7:0 p.m.•44 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

9.4AI score0.75098EPSS
SaveExploits5References4
ATTACKERKB
ATTACKERKB•added 2017/07/03 12:0 a.m.•118 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

9.8CVSS8.9AI score0.75098EPSS
SaveIn wildExploits5References6
Tenable Nessus
Tenable Nessus•added 2017/06/30 12:0 a.m.•27 views

Progress Telerik UI for ASP.NET AJAX Installed (Windows)

Binary data telerikuiforaspnetajaxinstalled.nbin...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus•added 2017/06/30 12:0 a.m.•669 views

Telerik UI for ASP.NET AJAX Cryptographic Weakness

The version of Telerik UI for ASP.NET AJAX installed on the remote Windows host is affected by a cryptographic weakness in Telerik.Web.UI.dll. An unauthenticated, remote attacker can exploit this, via specially crafted data, to disclose encryption keys. %NASLMINLEVEL 70300 C Tenable Network...

9.8CVSS8.6AI score0.75098EPSS
SaveExploits5References3
CNVD
CNVD•added 2017/05/24 12:0 a.m.•5 views

Telerik Reporting for ASP.NET WebForms Report Viewer Control Cross-Site Scripting Vulnerability

Telerik Reporting for ASP.NET WebForms Report Viewer control is an ASP.NET-based report generation control developed by Telerik Inc. A cross-site scripting vulnerability exists in Telerik Reporting for ASP.NET WebForms Report Viewer control versions prior to Telerik ASP.NET WebForms Report Viewer...

6.1CVSS6.2AI score0.09642EPSS
SaveExploits0References1
NVD
NVD•added 2017/05/22 5:29 a.m.•16 views

CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

6.1CVSS6.1AI score0.09642EPSS
SaveExploits0References3
OSV
OSV•added 2017/05/22 5:29 a.m.•4 views

CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

6.1CVSS5.9AI score0.09642EPSS
SaveExploits0References3
Prion
Prion•added 2017/05/22 5:29 a.m.•21 views

Cross site scripting

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

4.3CVSS6AI score0.09642EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist•added 2017/05/22 4:54 a.m.•33 views

CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

6.2AI score0.09642EPSS
SaveExploits0References3
CVE
CVE•added 2017/05/22 4:54 a.m.•103 views

CVE-2017-9140

The CVE-2017-9140 issue affects Telerik Reporting for ASP.NET WebForms (Telerik.ReportViewer.WebForms.dll) prior to R1 2017 SP2 (11.0.17.406). It is a reflected XSS vulnerability exploitable via the bgColor parameter to Telerik.ReportViewer.axd, allowing attacker-controlled script/HTML execution ...

6.1CVSS6.1AI score0.09642EPSS
SaveExploits0References3Affected Software1
ICS
ICS•added 2015/12/11 7:0 a.m.•25 views

Elipse E3 Process Control Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3 application. The process control vulnerability is a result of a third-party DLL, developed by Telerik, which is used in the Elipse E3 application. Elipse has released a new version that...

6.9CVSS7AI score0.00509EPSS
SaveExploits0References10
Rows per page
Query Builder