İçeriğe atla
Noroxi

telerik kayıtları

telerik üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
4 · %25
Silahlaştırılmış
4 · %25
Pre-auth RCE
4
Düzeltme kaydı olan
%12,5
Yayından KEV’e ortanca
1139 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

16 kayıt
  • CVE-2019-18935
    99Hemen

    Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    telerik · ui for asp.net ajax11 Ara 2019

  • CVE-2024-4358
    98Hemen

    Registration Authentication Bypass Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    telerik · report server 202429 May 2024

  • CVE-2017-11317
    94Hemen

    Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %84

    telerik · ui for asp.net ajax23 Ağu 2017

  • CVE-2017-9248
    92Hemen

    Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Te

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %75

    progress · sitefinity3 Tem 2017

  • CVE-2019-19790
    40Planlayın

    Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .

    KritikCVSS 9,8İstismar yokEPSS %2

    telerik · radchart13 Ara 2019

  • CVE-2024-10095
    39İzleyin

    Progress UI for WPF format provider unsafe deserialization vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    telerik · ui for wpf16 Ara 2024

  • CVE-2024-7575
    39İzleyin

    Improper neutralization special element in hyperlinks

    KritikCVSS 9,8İstismar yokEPSS %0

    telerik · ui for wpf25 Eyl 2024

  • CVE-2024-7576
    39İzleyin

    Progress UI for WPF format provider unsafe deserialization vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    telerik · ui for wpf25 Eyl 2024

  • CVE-2020-13661
    35İzleyin

    Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs via a hostname with a trailing space character, follo

    YüksekCVSS 8,8İstismar yokEPSS %1

    telerik · fiddler5 Kas 2020

  • CVE-2018-15122
    31İzleyin

    An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute cod

    YüksekCVSS 7,8İstismar yokEPSS %1

    telerik · justassembly16 Ağu 2018

  • CVE-2024-7679
    31İzleyin

    Improper neutralization special element in hyperlinks

    YüksekCVSS 7,8İstismar yokEPSS %0

    telerik · ui for wpf25 Eyl 2024

  • CVE-2024-8316
    31İzleyin

    Progress UI for WPF format provider unsafe deserialization vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    telerik · ui for wpf25 Eyl 2024

  • CVE-2024-10012
    31İzleyin

    Progress UI for WPF format provider unsafe deserialization vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    telerik · ui for wpf13 Kas 2024

  • CVE-2020-11414
    30İzleyin

    An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330.

    YüksekCVSS 7,5İstismar yokEPSS %1

    telerik · ui for silverlight31 Mar 2020

  • CVE-2015-2264
    27İzleyin

    Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-

    OrtaCVSS 6,9İstismar yokEPSS %0

    telerik · analytics monitor library12 Mar 2015

  • CVE-2014-4958
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20, and other versions

    OrtaCVSS 4,3İstismar yokEPSS %1

    telerik · asp.net ajax radeditor control26 Eyl 2014