Lucene search
+L

721 matches found

Tenable Nessus
Tenable Nessus
added 2024/12/19 12:00 a.m.23 views

Progress Telerik UI for WPF 2024.4.1213 (CVE-2024-10095)

The version of Progress Telerik UI for WPF installed on the remote host is prior to 2024.4.1213. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10095 advisory. - In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible...

9.8CVSS6.3AI score0.00743EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/16 5:15 p.m.20 views

CVE-2024-10095

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

9.8CVSS0.00743EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/16 5:15 p.m.10 views

CVE-2024-10095

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

9.8CVSS6.2AI score0.00743EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/16 4:59 p.m.44 views

CVE-2024-10095 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

8.4CVSS0.00743EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/16 4:59 p.m.20 views

CVE-2024-10095 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

8.4CVSS7.5AI score0.00743EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/16 4:59 p.m.146 views

CVE-2024-10095

CVE-2024-10095 affects Progress Telerik UI for WPF. The vulnerability stems from an insecure deserialization pathway that can enable a code execution attack. Affected products are Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213). The connected sources consistently describe the issue as ...

9.8CVSS8.6AI score0.00743EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.11 views

Progress Telerik UI 代码问题漏洞

Progress Telerik UI is a suite of UI User Interface controls for application development from Progress, Inc. A code issue vulnerability exists in Progress Telerik UI versions prior to 2024.4.1213, which stems from the presence of an insecure deserialization vulnerability that could allow code...

9.8CVSS7.2AI score0.00743EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.16 views

PT-2024-16023 · Telerik · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue affects Telerik UI for WPF and can be exploited, allowing for code...

9.8CVSS7.3AI score0.00743EPSS
SaveExploits0References14
OSV
OSV
added 2024/12/12 1:40 a.m.13 views

CVE-2024-11948

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The...

9.8CVSS6.3AI score0.01395EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/12 1:40 a.m.33 views

CVE-2024-11948

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The...

9.8CVSS0.01395EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.11 views

GFI Archiver 安全漏洞

GFI Archiver is an e-mail archiving software from GFI, Inc. for protecting, storing and retrieving your electronic communications. A security vulnerability exists in GFI Archiver that stems from the use of a vulnerable version of the Telerik Web UI by the product installer, which allows a remote...

9.8CVSS9.8AI score0.01395EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/11 9:55 p.m.79 views

CVE-2024-11948

CVE-2024-11948 affects GFI Archiver due to a vulnerable Telerik Web UI version used in the installer. The flaw allows remote attackers to execute arbitrary code on affected installations without authentication, running with the NETWORK SERVICE context. This is a post-exploitation/initial-access r...

9.8CVSS9.8AI score0.01395EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/11 9:55 p.m.14 views

CVE-2024-11948 GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The...

9.8CVSS7.9AI score0.01395EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/11 9:55 p.m.24 views

CVE-2024-11948 GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The...

9.8CVSS0.01395EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:00 a.m.16 views

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Telerik We...

9.8CVSS7.4AI score0.01395EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/21 12:00 a.m.13 views

Progress Telerik UI for WinForms < 2024.4.1113 Unsafe Deserialization

The version of Progress Telerik UI for WinForms installed on the remote host is prior to 2024.4.1113. It is, therefore, affected by the following vulnerability: - In Progress Telerik UI for WinForms versions prior to 2024 Q4 2024.4.1113, a code execution attack is possible through an insecure...

7.8CVSS6.3AI score0.00222EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/11/21 12:00 a.m.11 views

Telerik UI for WPF < 2024.4.1111 Unsafe Deserialization

The version of Progress Telerik UI for WPF installed on the remote Windows host is prior to 2024 Q4 2024.4.1111. It is, therefore, affected by the following: - In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure...

7.8CVSS6.3AI score0.00228EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/11/15 12:00 a.m.17 views

Progress Telerik Report Server <= 10.2.24.924 Encryption Weakness (CVE-2024-7295)

The version of Progress Telerik Report Server installed on the remote host is affected by an encryption weakness vulnerability: - The encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information. CVE-2024-7295 Note that Nessus has not...

7.1CVSS5.5AI score0.00106EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:00 a.m.18 views

The vulnerability of the Telerik Report Server software’s reporting control tool lies in its reliance on external controls for selecting classes. This allows an attacker to execute arbitrary code.

The vulnerability of the Telerik Report Server reporting management software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS5.9AI score0.00619EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:00 a.m.10 views

The vulnerability of the Telerik Report Server software’s reporting control tool lies in its reliance on external controls for selecting classes. This allows an attacker to execute arbitrary code.

The vulnerability of the Telerik Report Server reporting control software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

9.1CVSS5.8AI score0.00823EPSS
SaveExploits0References4
Rows per page
Query Builder