CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

721 matches found

CNVD•added 2017/07/07 12:00 a.m.•24 views

Multiple Vulnerabilities in ASP.NET AJAX and Sitefinity Progress Telerik UI

ASP.NET AJAX is a control for ASP.NET; Sitefinity is an open source platform for building enterprise websites and intranets. Progress Telerik UI is a UI user interface for ASP.NET controls that handles AJAX, developed by American Telerik. A security vulnerability in Telerik.Web.UI.dll for Progres...

9.8CVSS6.5AI score0.75098EPSS

SaveExploits5References1

Prion•added 2017/07/03 7:29 p.m.•31 views

Default credentials

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

7.5CVSS7.1AI score0.75098EPSS

SaveExploits5References4Affected Software2

OSV•added 2017/07/03 7:29 p.m.•8 views

CVE-2017-9248

9.8CVSS5.9AI score0.75098EPSS

SaveExploits5References5

NVD•added 2017/07/03 7:29 p.m.•35 views

CVE-2017-9248

9.8CVSS9.4AI score0.75098EPSS

SaveExploits5References5

Vulnrichment•added 2017/07/03 7:00 p.m.•18 views

CVE-2017-9248

6.9AI score0.75098EPSS

SaveExploits5References4

Cvelist•added 2017/07/03 7:00 p.m.•54 views

CVE-2017-9248

9.4AI score0.75098EPSS

SaveExploits5References4

CVE•added 2017/07/03 7:00 p.m.•1427 views

CVE-2017-9248

CVE-2017-9248 affects Progress Telerik UI for ASP.NET AJAX (and Sitefinity) prior to R2 2017 SP1 / 10.0.6412.0. The vulnerability lies in Telerik.Web.UI.dll handling of the Telerik.Web.UI.DialogParametersEncryptionKey and the MachineKey, enabling an attacker to defeat cryptographic protection and...

9.8CVSS9.2AI score0.75098EPSS

SaveIn wildExploits5References5Affected Software2

ATTACKERKB•added 2017/07/03 12:00 a.m.•123 views

CVE-2017-9248

9.8CVSS8.9AI score0.75098EPSS

SaveIn wildExploits5References6

Tenable Nessus•added 2017/06/30 12:00 a.m.•31 views

Progress Telerik UI for ASP.NET AJAX Installed (Windows)

Binary data telerikuiforaspnetajaxinstalled.nbin...

7AI score

SaveExploits0References1

Tenable Nessus•added 2017/06/30 12:00 a.m.•673 views

Telerik UI for ASP.NET AJAX Cryptographic Weakness

The version of Telerik UI for ASP.NET AJAX installed on the remote Windows host is affected by a cryptographic weakness in Telerik.Web.UI.dll. An unauthenticated, remote attacker can exploit this, via specially crafted data, to disclose encryption keys. %NASLMINLEVEL 70300 C Tenable Network...

9.8CVSS8.6AI score0.75098EPSS

SaveExploits5References3

CNVD•added 2017/05/24 12:00 a.m.•16 views

Telerik Reporting for ASP.NET WebForms Report Viewer Control Cross-Site Scripting Vulnerability

Telerik Reporting for ASP.NET WebForms Report Viewer control is an ASP.NET-based report generation control developed by Telerik Inc. A cross-site scripting vulnerability exists in Telerik Reporting for ASP.NET WebForms Report Viewer control versions prior to Telerik ASP.NET WebForms Report Viewer...

6.1CVSS6.2AI score0.09724EPSS

SaveExploits0References1

NVD•added 2017/05/22 5:29 a.m.•20 views

CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

6.1CVSS6.1AI score0.09724EPSS

SaveExploits0References3

OSV•added 2017/05/22 5:29 a.m.•10 views

CVE-2017-9140

6.1CVSS5.9AI score0.09724EPSS

SaveExploits0References3

Prion•added 2017/05/22 5:29 a.m.•26 views

Cross site scripting

4.3CVSS6AI score0.09724EPSS

SaveExploits0References3Affected Software2

CVE•added 2017/05/22 4:54 a.m.•114 views

CVE-2017-9140

The CVE-2017-9140 issue affects Telerik Reporting for ASP.NET WebForms (Telerik.ReportViewer.WebForms.dll) prior to R1 2017 SP2 (11.0.17.406). It is a reflected XSS vulnerability exploitable via the bgColor parameter to Telerik.ReportViewer.axd, allowing attacker-controlled script/HTML execution ...

6.1CVSS6.1AI score0.09724EPSS

SaveExploits0References3Affected Software1

Cvelist•added 2017/05/22 4:54 a.m.•41 views

CVE-2017-9140

6.2AI score0.09724EPSS

SaveExploits0References3

ICS•added 2015/12/11 7:00 a.m.•51 views

Elipse E3 Process Control Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-069-04 Elipse E3 Process Control Vulnerability that was published March 10, 2015, on the NCCIC/ICS-CERT web site. Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3...

6.9CVSS6.9AI score0.00509EPSS

SaveExploits0References10

ICS•added 2015/12/11 7:00 a.m.•31 views

Elipse E3 Process Control Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3 application. The process control vulnerability is a result of a third-party DLL, developed by Telerik, which is used in the Elipse E3 application. Elipse has released a new version that...

6.9CVSS7AI score0.00509EPSS

SaveExploits0References10

NVD•added 2015/03/13 1:59 a.m.•19 views

CVE-2015-2264

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse a csunsapi.dll, b swift.dll, c nfhwcrhk.dll, or...

6.9CVSS6.7AI score0.00501EPSS

SaveExploits0References1

Prion•added 2015/03/13 1:59 a.m.•19 views

Directory traversal

6.9CVSS7.3AI score0.00501EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by