Lucene search
K

1842 matches found

Virtuozzo
Virtuozzo
added 2024/11/18 12:0 a.m.20 views

Virtuozzo Hybrid Infrastructure 6.3 Hotfix 1 (6.3.0-177)

This update provides stability and performance improvements. Vulnerability id: VSTOR-91833 A performance improvement. Vulnerability id: VSTOR-94382 Increased the number of Grafana dashboards that can be added to the Dashboard Directory. Vulnerability id: VSTOR-94508 In the admin panel, LUNs are n...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/11/15 12:0 a.m.13 views

Progress Telerik Report Server <= 10.2.24.924 Encryption Weakness (CVE-2024-7295)

The version of Progress Telerik Report Server installed on the remote host is affected by an encryption weakness vulnerability: - The encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information. CVE-2024-7295 Note that Nessus has not...

7.1CVSS5.5AI score0.0016EPSS
Exploits0References2
NVD
NVD
added 2024/11/13 4:15 p.m.31 views

CVE-2024-8049

In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...

6.5CVSS0.01511EPSS
Exploits0References1
NVD
NVD
added 2024/11/13 4:15 p.m.11 views

CVE-2024-7295

In Progress® Telerik® Report Server versions prior to 2024 Q4 10.3.24.1112, the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information...

7.1CVSS0.0016EPSS
Exploits0References1
CVE
CVE
added 2024/11/13 3:22 p.m.47 views

CVE-2024-7295

CVE-2024-7295 affects Progress Telerik Report Server and is tied to an encryption weakness in the local asset data protection. Versions prior to 2024 Q4 (10.3.24.1112) reportedly use an older encryption algorithm, which may allow a sophisticated actor to decrypt local asset data. The vulnerabilit...

7.1CVSS6.3AI score0.0016EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/13 3:22 p.m.10 views

CVE-2024-7295 Hard-coded credentials used for temporary and cache data encryption

In Progress® Telerik® Report Server versions prior to 2024 Q4 10.3.24.1112, the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information...

7.1CVSS6.6AI score0.0016EPSS
Exploits0References1
CVE
CVE
added 2024/11/13 3:19 p.m.42 views

CVE-2024-10012

The CVE-2024-10012 entry concerns Progress Telerik UI for WPF. Affected software: Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111). Issue: insecure deserialization leading to a code execution attack. Impact: described as a code execution vulnerability with HIGH severity in offi...

7.8CVSS7.9AI score0.00079EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/13 3:19 p.m.14 views

CVE-2024-10012 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS0.00079EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 3:19 p.m.6 views

CVE-2024-10012 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS7.5AI score0.00079EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/13 3:17 p.m.14 views

CVE-2024-10013 Progress UI for WinForms format provider unsafe deserialization vulnerability

In Progress Telerik UI for WinForms versions prior to 2024 Q4 2024.4.1113, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS0.00013EPSS
Exploits0References1
CVE
CVE
added 2024/11/13 3:17 p.m.52 views

CVE-2024-10013

CVE-2024-10013 affects Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113). The vulnerability is an insecure deserialization leading to code execution. Underlying issue: deserialization of untrusted data within the WinForms UI suite. Impact is described as total in the risk m...

7.8CVSS7.9AI score0.00013EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/13 3:17 p.m.21 views

CVE-2024-10013 Progress UI for WinForms format provider unsafe deserialization vulnerability

In Progress Telerik UI for WinForms versions prior to 2024 Q4 2024.4.1113, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS7.5AI score0.00013EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.2 views

Progress Telerik UI 代码问题漏洞

Progress Telerik UI is a suite of UI user interface controls for application development from Progress USA. A code issue vulnerability exists in versions of Progress Telerik UI prior to 2024 Q4 that stems from insecure deserialization and could lead to a code execution attack...

7.8CVSS7.2AI score0.00013EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.1 views

Progress Telerik UI 代码问题漏洞

Progress Telerik UI is a suite of UI user interface controls for application development from Progress USA. A code issue vulnerability exists in versions of Progress Telerik UI prior to 2024 Q4 that stems from insecure deserialization and could lead to a code execution attack...

7.8CVSS7.2AI score0.00079EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.1 views

Progress Software WS_FTP Server 安全漏洞

Progress Software WSFTP Server is an effective and highly manageable FTP server from Progress Software, Inc. A security vulnerability exists in Progress Software WSFTP Server versions prior to 8.8.9 that stems from an incorrect implementation of the authentication algorithm in the Web Transfer...

6.5CVSS6.8AI score0.00175EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2024/11/06 12:0 a.m.2 views

Progress OpenEdge Installed (Linux)

Binary data progressopenedgenixinstalled.nbin...

7.3AI score
Exploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.6 views

CVE-2024-37411

Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through = 0.9.1...

5.3CVSS0.00316EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.11 views

CVE-2024-37411 WordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Team Emilia Projects Progress Planner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Progress Planner: from n/a through 0.9.1...

5.3CVSS6.9AI score0.00316EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/01 2:18 p.m.17 views

CVE-2024-37411 WordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through = 0.9.1...

5.3CVSS0.00316EPSS
Exploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.44 views

CVE-2024-37411

CVE-2024-37411 describes a Missing Authorization vulnerability in the WordPress plugin Progress Planner. Concrete details in connected sources identify a Broken Access Control issue, affecting Progress Planner versions from n/a through 0.9.1 (

5.3CVSS5.9AI score0.00316EPSS
Exploits0References1
Rows per page
Query Builder