Lucene search
+L

217 matches found

Cvelist
Cvelist
•added 2024/09/25 1:55 p.m.•46 views

CVE-2024-7575 Improper neutralization special element in hyperlinks

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

7.8CVSS0.00703EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/25 1:55 p.m.•90 views

CVE-2024-7575

Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924) are vulnerable to a command injection attack. The root cause is the improper neutralization of hyperlink elements , which allows for potential command injection. To remediate this issue, users should update to version 2024 Q3 (202...

9.8CVSS8.6AI score0.00703EPSS
SaveIn wildExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/25 1:55 p.m.•19 views

CVE-2024-7575 Improper neutralization special element in hyperlinks

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

7.8CVSS7.4AI score0.00703EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/25 12:00 a.m.•28 views

PT-2024-38934 · Telerik · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q3 2024.3.924 Description: The issue is related to an insecure deserialization vulnerability, which allows for a code execution attack. This vulnerability can be exploited remotely. Recommendations: F...

7.8CVSS7.8AI score0.00246EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•3 views

CVE-2024-7575: Improper Neutralization of Special Elements used in a Command

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

9.8CVSS5.6AI score0.00703EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•6 views

CVE-2024-8316: Deserialization of Untrusted Data

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS5.9AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/25 12:00 a.m.•3 views

PT-2024-38430

Name of the Vulnerable Software and Affected Versions Telerik UI for WPF versions prior to 2024 Q3 2024.3.924 Description A code execution attack is possible through an insecure deserialization vulnerability, allowing for potential code execution risks. Recommendations For versions prior to 2024 ...

9.8CVSS6AI score0.00463EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•5 views

CVE-2024-7576: Deserialization of Untrusted Data

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

9.8CVSS5.9AI score0.00463EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/25 1:31 p.m.•15 views

MAL-2024-4697 Malicious code in WPF-UI-Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:31 p.m.•9 views

Malicious code in Ultimate.Wpf.Toolkit (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:31 p.m.•12 views

Malicious code in Shade.WPF.Controls (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:30 p.m.•5 views

Malicious code in Modern.UI2.WPF (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSV
OSV
•added 2024/06/25 1:30 p.m.•14 views

MAL-2024-4550 Malicious code in Modern.UI2.WPF (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/04/17 6:21 p.m.•59 views

GHSA-6QMX-42H2-J8H6 .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2024-21409 | .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 ,and .NET 8.0. This advisory also provides guidance on what developers can do t...

7.3CVSS7.5AI score0.02513EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/04/17 6:21 p.m.•67 views

.NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2024-21409 | .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 ,and .NET 8.0. This advisory also provides guidance on what developers can do t...

7.3CVSS7.5AI score0.02513EPSS
SaveExploits0References5Affected Software3
OpenVAS
OpenVAS
•added 2024/04/11 12:00 a.m.•71 views

.NET Core Privilege Escalation Vulnerability (KB5037336)

This host is missing an important security update according to Microsoft KB5037336. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.3CVSS7.3AI score0.02513EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/04/11 12:00 a.m.•154 views

.NET Core Privilege Escalation Vulnerability (KB5037337)

This host is missing an important security update according to Microsoft KB5037337. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.3CVSS7.3AI score0.02513EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/04/11 12:00 a.m.•34 views

.NET Core Privilege Escalation Vulnerability (KB5037338)

This host is missing an important security update according to Microsoft KB5037338. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.3CVSS7.3AI score0.02513EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2023/11/14 8:00 a.m.•87 views

November 14, 2023-KB5032004 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2

None None...

9.8CVSS7.5AI score0.12512EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2023/09/12 7:00 a.m.•212 views

September 12, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5030184)

September 12, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 KB5030184 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework...

7.8CVSS8.1AI score0.01225EPSS
SaveExploits0
Rows per page
Query Builder