Skip to contentProgress vulnerabilities
Products
Show 7 moreShow less
Newest
- progress ws ftp serverReflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP...CVE-2022-27665Public exploitFix availableEPSS 33.1%6.1 Medium
- progress ws ftp serverIn Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their...CVE-2023-240297.2 High
- progress whatsup goldIn Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to...CVE-2022-427119.6 Critical
- progress ipswitch ws ftp serverIn Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did...CVE-2022-369684.3 Medium
- progress ipswitch ws ftp serverIn Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS)...CVE-2022-369676.1 Medium
- progress whatsup goldIn Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an...CVE-2022-298486.5 Medium
- progress whatsup goldIn Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an...CVE-2022-29847EPSS 57.6%7.5 High
- progress whatsup goldIn Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an...CVE-2022-298465.3 Medium
- progress whatsup goldIn Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an...CVE-2022-298456.5 Medium
- progress openedgeIn Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the...CVE-2022-298497.8 High
- progress whatsup goldIn Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately...CVE-2021-41318Public exploit6.1 Medium
- progress moveit transferIn certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the...CVE-2021-381599.8 Critical
- progress moveit transferIn certain Progress MOVEit Transfer versions before 2021.0.3 (aka 13.0.3), SQL injection in the...CVE-2021-376148.8 High
- progress moveit transferIn Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1.x before 2019.1.5 (11.1.5), 2019.2.x...CVE-2021-338948.8 High
- progress moveit transferIn Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in...CVE-2021-318278.8 High
- progress telerik ui for asp.net ajaxAn issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows...CVE-2021-28141Disputed9.8 Critical
- progress moveit transferIn Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload...CVE-2020-28647Public exploit5.4 Medium
- progress moveit automationAn issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint...CVE-2020-126776.1 Medium
- progess moveit transferIn Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API...CVE-2020-86129.0 Critical
- progess moveit transferIn Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL...CVE-2020-86118.8 High
- progress loadmasterA Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a...CVE-2014-5287Public exploit8.8 High
- progress telerik ui for asp.net ajax, telerik radchart +1 morePath traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and...CVE-2019-197909.8 Critical
- progress telerik ui for asp.net ajax, telerik ui for asp.net ajax +1 moreProgress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization...CVE-2019-18935In KEVPublic exploitEPSS 99.7%9.8 Critical
- progress sitefinityProgress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because...CVE-2019-173929.8 Critical
- progress sitefinity cmsProgress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News...CVE-2017-186396.1 Medium
- progress ws ftp serverA Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server...CVE-2019-121435.3 Medium
- progress sitefinityProgress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries...CVE-2019-72156.5 Medium
- progress fiddlerTelerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it,...CVE-2019-120977.8 High
- progress telerik extensions for asp.net mvcImproper Access Control in Telerik ExtensionsCVE-2018-170605.3 Medium
- progress sitefinity cmsCross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions...CVE-2018-170546.1 Medium
- progress sitefinity cmsCross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions...CVE-2018-170536.1 Medium
- progress sitefinity cmsCross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2...CVE-2018-170566.1 Medium
- progress sitefinityAn arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0...CVE-2018-170557.5 High
- progress kendo uiCross-site scripting (XSS) vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote...CVE-2018-140376.1 Medium
- progress whatsup goldAn SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious...CVE-2018-89399.8 Critical
- progress whatsup goldA Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before...CVE-2018-89389.8 Critical
- progress sitefinityProgress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that...CVE-2017-181798.8 High
- progress sitefinityAuthenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication...CVE-2017-181786.1 Medium
- progress sitefinityProgress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User...CVE-2017-181775.4 Medium
- progress sitefinityProgress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the...CVE-2017-181765.4 Medium
- progress sitefinityProgress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka...CVE-2017-181755.4 Medium
- progress whatsup goldAn issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Multiple SQL...CVE-2018-57789.8 Critical
- progress whatsup goldAn issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients...CVE-2018-57779.8 Critical
- progress sitefinitySitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass...CVE-2017-158839.8 Critical
- progress openedgeInsecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows...CVE-2015-92459.8 Critical
- progress telerik ui for asp.net ajax, telerik user interface (ui) for asp.net ajax +1 moreProgress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to...CVE-2017-11357In KEVPublic exploitEPSS 77.7%9.8 Critical
- progress mixlib-archivemixlib-archive Path Traversal vulnerabilityCVE-2017-1000026Fix available7.5 High
- progress sitefinity, telerik ui for asp.net ajax, progress asp.net ajax and sitefinity +2 moreTelerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity...CVE-2017-9248In KEVPublic exploitEPSS 75.1%9.8 Critical
- progress telerik reporting, sitefinity cms +1 moreCross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik...CVE-2017-91406.1 Medium
- progress whatsup goldIpswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL InjectionCVE-2016-10000008.8 High
- Show moreLoading…