progress kayıtları
progress üreticisine ait 301 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 8 · %2,7
- Silahlaştırılmış
- 17 · %5,6
- Pre-auth RCE
- 37
- Düzeltme kaydı olan
- %41,2
- Yayından KEV’e ortanca
- 158 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')40
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')27
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')19
- CWE-20 Improper Input Validation13
- CWE-502 Deserialization of Untrusted Data12
- CWE-287 Improper Authentication11
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
301 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
99Hemen | CVE-2023-34362Silahlaştırılmış | In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL progress · moveit cloud · CWE-89 | Kritik9,8 | KEV | %99,9 | 2 Haz 2023 |
99Hemen | CVE-2024-4885Silahlaştırılmış | WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerabilityprogress · whatsup gold · CWE-22 | Kritik9,8 | KEV | %99,3 | 25 Haz 2024 |
98Hemen | CVE-2024-1212Silahlaştırılmış | LoadMaster Pre-Authenticated OS Command Injectionprogress · loadmaster · CWE-78 | Kritik9,8 | KEV | %95,4 | 21 Şub 2024 |
97Hemen | CVE-2024-6670Silahlaştırılmış | WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerabilityprogress · whatsup gold · CWE-89 | Kritik9,8 | KEV | %93,0 | 29 Ağu 2024 |
92Hemen | CVE-2023-40044Silahlaştırılmış | WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerabilityprogress · ws ftp server · CWE-502 | Yüksek8,8 | KEV | %90,6 | 27 Eyl 2023 |
92Hemen | CVE-2017-11357Silahlaştırılmış | Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackeprogress · telerik ui for asp.net ajax · CWE-434 | Kritik9,8 | KEV | %77,7 | 23 Ağu 2017 |
92Hemen | CVE-2026-8037Silahlaştırılmış | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFprogress · connection manager for objectscale · CWE-77 | Kritik9,8 | KEV | %77,4 | 4 Haz 2026 |
92Hemen | CVE-2017-9248Silahlaştırılmış | Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Teprogress · sitefinity · CWE-522 | Kritik9,8 | KEV | %75,1 | 3 Tem 2017 |
68Bu hafta | CVE-2023-35708Kavram kanıtı | In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL progress · moveit transfer · CWE-89 | Kritik9,8 | — | %96,7 | 16 Haz 2023 |
67Bu hafta | CVE-2024-2389Silahlaştırılmış | Flowmon Unauthenticated Command Injection Vulnerabilityprogress · flowmon · CWE-78 | Kritik9,8 | — | %93,0 | 2 Nis 2024 |
65Bu hafta | CVE-2023-36934Kavram kanıtı | In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023progress · moveit transfer · CWE-89 | Kritik9,1 | — | %95,2 | 5 Tem 2023 |
63Bu hafta | CVE-2024-5806Silahlaştırılmış | MOVEit Transfer Authentication Bypass Vulnerabilityprogress · moveit transfer · CWE-287 | Kritik9,8 | — | %81,5 | 25 Haz 2024 |
58Planlayın | CVE-2024-4883Kavram kanıtı | WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerabilityprogress · whatsup gold · CWE-77 | Kritik9,8 | — | %64,5 | 25 Haz 2024 |
56Planlayın | CVE-2023-36932İstismar yok | In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023progress · moveit transfer · CWE-89 | Yüksek8,1 | — | %81,1 | 5 Tem 2023 |
55Planlayın | CVE-2003-0772Kavram kanıtı | Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary codipswitch · ws ftp server | Yüksek7,5 | — | %84,9 | 22 Eyl 2003 |
54Planlayın | CVE-2024-46909İstismar yok | WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerabilityprogress · whatsup gold · CWE-16 | Kritik9,8 | — | %48,9 | 2 Ara 2024 |
52Planlayın | CVE-2006-4847Silahlaştırılmış | Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via longipswitch · ws ftp server | Orta6,5 | — | %85,3 | 18 Eyl 2006 |
52Planlayın | CVE-2023-36933İstismar yok | In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is progress · moveit transfer · CWE-755 | Yüksek7,5 | — | %72,2 | 5 Tem 2023 |
52Planlayın | CVE-2024-2448İstismar yok | LoadMaster Command Injection Vulnerabilityprogress · loadmaster · CWE-78 | Yüksek8,8 | — | %55,4 | 22 Mar 2024 |
51Planlayın | CVE-2024-5010İstismar yok | WhatsUp Gold TestController multiple information disclosure vulnerabilitiesprogress · whatsup gold · CWE-200 | Yüksek7,5 | — | %70,0 | 25 Haz 2024 |
49Planlayın | CVE-2004-0798Silahlaştırılmış | Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary coprogress · whatsup gold | Yüksek7,5 | — | %62,6 | 20 Eki 2004 |
47Planlayın | CVE-2022-29847Silahlaştırılmış | In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transacprogress · whatsup gold · CWE-918 | Yüksek7,5 | — | %57,6 | 11 May 2022 |
47Planlayın | CVE-2024-1800Silahlaştırılmış | Progress Telerik Report Server Deserializationprogress · telerik report server · CWE-502 | Yüksek8,8 | — | %40,4 | 20 Mar 2024 |
47Planlayın | CVE-2024-46906İstismar yok | WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerabilityprogress · whatsup gold · CWE-89 | Yüksek8,8 | — | %40,4 | 2 Ara 2024 |
46Planlayın | CVE-2024-4884İstismar yok | WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerabilityprogress · whatsup gold · CWE-77 | Kritik9,8 | — | %24,3 | 25 Haz 2024 |
- CVE-2023-3436299Hemen
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100progress · moveit cloud2 Haz 2023
- CVE-2024-488599Hemen
WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99progress · whatsup gold25 Haz 2024
- CVE-2024-121298Hemen
LoadMaster Pre-Authenticated OS Command Injection
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95progress · loadmaster21 Şub 2024
- CVE-2024-667097Hemen
WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93progress · whatsup gold29 Ağu 2024
- CVE-2023-4004492Hemen
WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %91progress · ws ftp server27 Eyl 2023
- CVE-2017-1135792Hemen
Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attacke
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %78progress · telerik ui for asp.net ajax23 Ağu 2017
- CVE-2026-803792Hemen
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %77progress · connection manager for objectscale4 Haz 2026
- CVE-2017-924892Hemen
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Te
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %75progress · sitefinity3 Tem 2017
- CVE-2023-3570868Bu hafta
In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL
KritikCVSS 9,8Kavram kanıtıEPSS %97progress · moveit transfer16 Haz 2023
- CVE-2024-238967Bu hafta
Flowmon Unauthenticated Command Injection Vulnerability
KritikCVSS 9,8SilahlaştırılmışEPSS %93progress · flowmon2 Nis 2024
- CVE-2023-3693465Bu hafta
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023
KritikCVSS 9,1Kavram kanıtıEPSS %95progress · moveit transfer5 Tem 2023
- CVE-2024-580663Bu hafta
MOVEit Transfer Authentication Bypass Vulnerability
KritikCVSS 9,8SilahlaştırılmışEPSS %81progress · moveit transfer25 Haz 2024
- CVE-2024-488358Planlayın
WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %65progress · whatsup gold25 Haz 2024
- CVE-2023-3693256Planlayın
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023
YüksekCVSS 8,1İstismar yokEPSS %81progress · moveit transfer5 Tem 2023
- CVE-2003-077255Planlayın
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary cod
YüksekCVSS 7,5Kavram kanıtıEPSS %85ipswitch · ws ftp server22 Eyl 2003
- CVE-2024-4690954Planlayın
WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %49progress · whatsup gold2 Ara 2024
- CVE-2006-484752Planlayın
Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long
OrtaCVSS 6,5SilahlaştırılmışEPSS %85ipswitch · ws ftp server18 Eyl 2006
- CVE-2023-3693352Planlayın
In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is
YüksekCVSS 7,5İstismar yokEPSS %72progress · moveit transfer5 Tem 2023
- CVE-2024-244852Planlayın
LoadMaster Command Injection Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %55progress · loadmaster22 Mar 2024
- CVE-2024-501051Planlayın
WhatsUp Gold TestController multiple information disclosure vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %70progress · whatsup gold25 Haz 2024
- CVE-2004-079849Planlayın
Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary co
YüksekCVSS 7,5SilahlaştırılmışEPSS %63progress · whatsup gold20 Eki 2004
- CVE-2022-2984747Planlayın
In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transac
YüksekCVSS 7,5SilahlaştırılmışEPSS %58progress · whatsup gold11 May 2022
- CVE-2024-180047Planlayın
Progress Telerik Report Server Deserialization
YüksekCVSS 8,8SilahlaştırılmışEPSS %40progress · telerik report server20 Mar 2024
- CVE-2024-4690647Planlayın
WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %40progress · whatsup gold2 Ara 2024
- CVE-2024-488446Planlayın
WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %24progress · whatsup gold25 Haz 2024