2010 matches found
Malicious code in md-progress-circular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8452da64b993f8adad40197107a47602421aecb7bc71f7b4fae5560a8429552e The OpenSSF Package Analysis project identified 'md-progress-circular' @ 100000.0.0 npm as malicious. It is considered malicious because: - The...
The vulnerability of the SFTP software module for processing and transmitting confidential data in Progress MOVEit Transfer allows a perpetrator to bypass authentication processes and gain increased privileges.
The vulnerability of the SFTP software module for processing and transmitting confidential data in Progress MOVEit Transfer is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to bypass the authentication process and gain increased privilege...
CVE-2024-6576
Improper Authentication vulnerability in Progress MOVEit Transfer SFTP module can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 2024.0.0 before 2024.0.3...
CVE-2024-6576 MOVEit Transfer Privilege Escalation Vulnerability
Improper Authentication vulnerability in Progress MOVEit Transfer SFTP module can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 2024.0.0 before 2024.0.3...
CVE-2024-6576
CVE-2024-6576 - Progress MOVEit Transfer (SFTP module) : Affected MOVEit Transfer versions include 2023.0.0–2023.0.11, 2023.1.0–2023.1.6, and 2024.0.0–2024.0.2, with a root cause described as an improper authentication vulnerability that can lead to privilege escalation. Remediation per sources: ...
CVE-2024-6576 MOVEit Transfer Privilege Escalation Vulnerability
Improper Authentication vulnerability in Progress MOVEit Transfer SFTP module can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 2024.0.0 before 2024.0.3...
PT-2024-5295 · Progress · Progress Moveit Transfer
Name of the Vulnerable Software and Affected Versions: Progress MOVEit Transfer versions 2023.0.0 through 2023.0.11 Progress MOVEit Transfer versions 2023.1.0 through 2023.1.6 Progress MOVEit Transfer versions 2024.0.0 through 2024.0.2 Description: The issue is related to improper authentication ...
Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk
Progress Software is urging users to update their Telerik Report Server instances following the discovery of a critical security flaw that could result in remote code execution. The vulnerability, tracked as CVE-2024-6327 CVSS score: 9.9, impacts Report Server version 2024 Q2 10.1.24.514 and...
Progress Telerik Reporting < 2024 Q2 (18.1.24.709) Object Injection
The version of Progress Telerik Reporting installed on the remote Windows host is prior to 2024 Q2 18.1.24.709. It is, therefore, affected by an object injection vulnerability: - In Progress® Telerik® Reporting versions prior to 18.1.24.709, an object injection attack is possible through an...
Progress Telerik Report Server Insecure Deserialization (CVE-2024-6327)
The version of Progress Telerik Report Server installed on the remote host is affected by an insecure deserialization vulnerability, as follows: - In Progress Telerik Report Server versions prior to 2024 Q2 10.1.24.709, a remote code execution attack is possible through an insecure deserializatio...
CVE-2024-6096
In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability...
CVE-2024-6096
Progress Telerik Reporting, before version 18.1.24.709, is affected by an object-injection vulnerability due to insecure type resolution that can lead to code execution. The vulnerability affects Progress Telerik Reporting (a .NET/.NET Framework embedded reporting tool) and various advisories ide...
CVE-2024-6096 Unsafe Deserialization Vulnerability
In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability...
CVE-2024-6327 Progress Telerik Report Server Deserialization
In Progress® Telerik® Report Server versions prior to 2024 Q2 10.1.24.709, a remote code execution attack is possible through an insecure deserialization vulnerability...
CVE-2024-37422
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Team Emilia Projects Progress Planner allows Stored XSS.This issue affects Progress Planner: from n/a through 0.9.2...
CVE-2024-37422
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through = 0.9.2...
CVE-2024-37422 WordPress Progress Planner plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Team Emilia Projects Progress Planner allows Stored XSS.This issue affects Progress Planner: from n/a through 0.9.2...
CVE-2024-37422 WordPress Progress Planner plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through = 0.9.2...