TE
Vendor
Telerik
19
CVEs
6
On KEV
0
New 30D
Products
UF9.8
UI For Asp.net Ajax
Telerik
3 CVEs3 on KEV0 new
UI9.8
User Interface (UI) for ASP.NET AJAX
Telerik
2 CVEs2 on KEV0 new
RS9.8
Report Server 2024
Telerik
1 CVEs1 on KEV0 new
UF9.8
UI For Wpf
Telerik
6 CVEs0 on KEV0 new
AM–
Analytics Monitor Library
Telerik
1 CVEs0 on KEV0 new
AA–
Asp.net Ajax Radeditor Control
Telerik
1 CVEs0 on KEV0 new
FI8.8
Fiddler
Telerik
1 CVEs0 on KEV0 new
JU7.8
Justassembly
Telerik
1 CVEs0 on KEV0 new
JU7.8
Justdecompile
Telerik
1 CVEs0 on KEV0 new
RA9.8
Radchart
Telerik
1 CVEs0 on KEV0 new
UF7.5
UI For Silverlight
Telerik
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-10095 | UF UI For Wpf Telerik | 9.8 | Dec 16 | In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability |
| CVE-2024-10012 | UF UI For Wpf Telerik | 7.8 | Nov 13 | In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an insecure deserialization vulnerability |
| CVE-2024-8316 | UF UI For Wpf Telerik | 7.8 | Sep 25 | In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability |
| CVE-2024-7679 | UF UI For Wpf Telerik | 7.8 | Sep 25 | In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements |
| CVE-2024-7576 | UF UI For Wpf Telerik | 9.8 | Sep 25 | In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability |
| CVE-2024-7575 | UF UI For Wpf Telerik | 9.8 | Sep 25 | In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements |
| CVE-2024-4358 In wildKEV | RS Report Server 2024 Telerik | 9.8 | May 29 | Registration Authentication Bypass Vulnerability |
| CVE-2020-13661 | FI Fiddler Telerik | 8.8 | Nov 5 | Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs via a hostname with a trailing space character, followed by --utility-and-browser… |
| CVE-2020-11414 | UF UI For Silverlight Telerik | 7.5 | Mar 31 | An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330 |
| CVE-2019-19790 | RA Radchart Telerik | 9.8 | Dec 13 | Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF… |
| CVE-2019-18935 RansomwareIn wildKEV | UF UI For Asp.net Ajax Telerik | 9.8 | Dec 11 | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability |
| CVE-2018-15122 | JU Justdecompile Telerik | 7.8 | Aug 16 | An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object… |
| CVE-2017-11357 RansomwareIn wildKEV | UI User Interface (UI) for ASP.NET AJAX Telerik | 9.8 | Aug 23 | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability |
| CVE-2017-11317 In wildKEV | UF UI For Asp.net Ajax Telerik | 9.8 | Aug 23 | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability |
| CVE-2017-9248 In wildKEV | UF UI For Asp.net Ajax Telerik | 9.8 | Jul 3 | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability |
| CVE-2015-2264 | AM Analytics Monitor Library Telerik | – | Mar 13 | Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor… |
| CVE-2014-4958 | AA Asp.net Ajax Radeditor Control Telerik | – | Sep 26 | Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20, and other versions allows remote attackers to inject… |
