CVE-2024-1800

In Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130, a remote code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-1800

In Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130, a remote code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-1800

Progress Telerik Report Server CVE-2024-1800 describes an insecure deserialization vulnerability in versions prior to 2024 Q1 (10.0.24.130) that enables remote code execution. The issue arises from deserialization flaws in the server, allowing an attacker to trigger code execution remotely. Sever...

CVE-2024-1800 Progress Telerik Report Server Deserialization

In Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130, a remote code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-1800 Progress Telerik Report Server Deserialization

In Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130, a remote code execution attack is possible through an insecure deserialization vulnerability...

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

PT-2024-2324 · Progress · Progress Telerik Report Server

Name of the Vulnerable Software and Affected Versions: Progress® Telerik® Report Server versions prior to 2024 Q1 10.0.24.130 Description: A remote code execution attack is possible through an insecure deserialization vulnerability in the Progress® Telerik® Report Server. This vulnerability is...

PT-2024-3990

Name of the Vulnerable Software and Affected Versions Progress Telerik Report Server versions 2024 Q1 10.0.24.305 or earlier Description The issue is related to an authentication bypass vulnerability in Progress Telerik Report Server, allowing an unauthenticated attacker to gain access to...

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

Fortinet FortiSIEM OS Command Injection in Report Server (FG-IR-23-135)

The version of Fortinet FortiSIEM running on the remote server is 4.7.x, 4.9.x, 4.10.x, 5.0.x, 5.1.x, 5.2.x, 5.3.x, or 5.4.x. It is, therefore, affected by an OS command injection vulnerability that can allow a remote unauthenticated attacker to execute unauthorized commands via crafted API...

CVE-2023-5777

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server...

CVE-2023-5777

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server...

CVE-2023-5777

CVE-2023-5777 affects Weintek EasyBuilder Pro. The root issue is use of hard-coded credentials, which can expose the private key after a crash report is sent, potentially allowing remote control of the crash report server. Affected versions are EasyBuilder Pro before v6.07.02, and 6.08.01.592 and...

CVE-2022-46902

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. During the...

CVE-2022-46901

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This...

CVE-2022-46902

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. During the...

CVE-2022-46901

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This...

CVE-2022-46900

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Exec filename. The Vocera Report Console contains various jobs that are executed on the server at specified intervals, e.g., backup, etc. An authenticated user has the ability to...

CVE-2022-46900

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Exec filename. The Vocera Report Console contains various jobs that are executed on the server at specified intervals, e.g., backup, etc. An authenticated user has the ability to...