Skip to content
Noroxi

telerik records

16 published records for vendor telerik.

Researcher profile

Entered KEV
4 · 25%
Weaponized
4 · 25%
Pre-auth RCE
4
With a fix record
12.5%
Median publish → KEV
1139 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2019-18935
    99Now

    Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    telerik · ui for asp.net ajaxDec 11, 2019

  • CVE-2024-4358
    98Now

    Registration Authentication Bypass Vulnerability

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    telerik · report server 2024May 29, 2024

  • CVE-2017-11317
    94Now

    Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which a

    CriticalCVSS 9.8KEVWeaponizedEPSS 84%

    telerik · ui for asp.net ajaxAug 23, 2017

  • CVE-2017-9248
    92Now

    Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Te

    CriticalCVSS 9.8KEVWeaponizedEPSS 75%

    progress · sitefinityJul 3, 2017

  • CVE-2019-19790
    40Plan

    Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .

    CriticalCVSS 9.8No exploitEPSS 2%

    telerik · radchartDec 13, 2019

  • CVE-2024-10095
    39Monitor

    Progress UI for WPF format provider unsafe deserialization vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    telerik · ui for wpfDec 16, 2024

  • CVE-2024-7575
    39Monitor

    Improper neutralization special element in hyperlinks

    CriticalCVSS 9.8No exploitEPSS 0%

    telerik · ui for wpfSep 25, 2024

  • CVE-2024-7576
    39Monitor

    Progress UI for WPF format provider unsafe deserialization vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    telerik · ui for wpfSep 25, 2024

  • CVE-2020-13661
    35Monitor

    Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs via a hostname with a trailing space character, follo

    HighCVSS 8.8No exploitEPSS 1%

    telerik · fiddlerNov 5, 2020

  • CVE-2018-15122
    31Monitor

    An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute cod

    HighCVSS 7.8No exploitEPSS 1%

    telerik · justassemblyAug 16, 2018

  • CVE-2024-7679
    31Monitor

    Improper neutralization special element in hyperlinks

    HighCVSS 7.8No exploitEPSS 0%

    telerik · ui for wpfSep 25, 2024

  • CVE-2024-8316
    31Monitor

    Progress UI for WPF format provider unsafe deserialization vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    telerik · ui for wpfSep 25, 2024

  • CVE-2024-10012
    31Monitor

    Progress UI for WPF format provider unsafe deserialization vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    telerik · ui for wpfNov 13, 2024

  • CVE-2020-11414
    30Monitor

    An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330.

    HighCVSS 7.5No exploitEPSS 1%

    telerik · ui for silverlightMar 31, 2020

  • CVE-2015-2264
    27Monitor

    Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-

    MediumCVSS 6.9No exploitEPSS 0%

    telerik · analytics monitor libraryMar 12, 2015

  • CVE-2014-4958
    18Monitor

    Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20, and other versions

    MediumCVSS 4.3No exploitEPSS 1%

    telerik · asp.net ajax radeditor controlSep 26, 2014