Skip to contentProgress vulnerabilities
Products
Show 7 moreShow less
Newest
- progress telerik report server, telerik reporting +1 moreUncontrolled resource consumption of anonymous endpointsCVE-2024-72947.5 High
- progress telerik report server, telerik reporting +1 morePassword policy for new users is not strong enoughCVE-2024-72937.5 High
- progress telerik reportingImproper neutralization special element in hyperlinksCVE-2024-78407.8 High
- progress telerik reportingTelerik Reporting Insecure Expression EvaluationCVE-2024-80487.8 High
- progress telerik reportingTelerik Reporting EntityDataSource Insecure Type ResolutionCVE-2024-80148.8 High
- kemptechnologies loadmaster, loadmaster mt, progress multi-tenant loadmaster +2 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.CVE-2024-66588.4 High
- kemptechnologies loadmaster, loadmaster mt, multi-tenant hypervisor firmware +2 moreImproper Input Validation vulnerability in Progress LoadMaster allows OS Command InjectionCVE-2024-7591Public exploitEPSS 39.2%10.0 Critical
- progress openedgeClient connections using default TLS certificates from OpenEdge may bypass TLS host name validationCVE-2024-73467.2 High
- progress openedgeDirect local client connections to MS Agents can bypass authenticationCVE-2024-73458.3 High
- progress openedgeUnauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery serviceCVE-2024-76548.3 High
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation VulnerabilityCVE-2024-66728.8 High
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass VulnerabilityCVE-2024-6671EPSS 19.0%9.8 Critical
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold HasErrors SQL Injection Authentication Bypass VulnerabilityCVE-2024-6670In KEVPublic exploitEPSS 92.9%9.8 Critical
- progress ws ftp serverMulti-Factor Authentication Bypass in Progress WS_FTP ServerCVE-2024-77456.5 Medium
- progress ws ftp serverImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP ServerCVE-2024-77446.5 Medium
- progress moveit transferMOVEit Transfer Privilege Escalation VulnerabilityCVE-2024-65767.3 High
- progress telerik reportingUnsafe Deserialization VulnerabilityCVE-2024-60968.8 High
- progress telerik report server, telerik reporting +1 moreProgress Telerik Report Server DeserializationCVE-2024-63279.9 Critical
- progress whatsup goldWhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure VulnerabilityCVE-2024-50195.3 Medium
- progress whatsup goldWhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure VulnerabilityCVE-2024-50185.3 Medium
- progress whatsup goldWhatsUp Gold AppProfileImport path traversal vulnerabilityCVE-2024-50176.5 Medium
- progress whatsup goldWhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution VulnerabilityCVE-2024-5016EPSS 22.4%7.2 High
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure VulnerabilityCVE-2024-50157.1 High
- progress whatsup goldWhatsUp Gold GetASPReport Server-Side Request Forgery Information DisclosureCVE-2024-50147.1 High
- progress whatsup goldWhatsUp Gold InstallController Denial-of-Service VulnerabilityCVE-2024-50137.5 High
- progress whatsup goldWhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure VulnerabilityCVE-2024-50128.6 High
- progress whatsup goldWhatsUp Gold TestController Chart denial of service vulnerabilityCVE-2024-5011EPSS 47.1%7.5 High
- progress whatsup goldWhatsUp Gold TestController multiple information disclosure vulnerabilitiesCVE-2024-5010EPSS 70.0%7.5 High
- progress whatsup goldWhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation VulnerabilityCVE-2024-5009Public exploitEPSS 17.4%8.4 High
- progress whatsup goldWhatsUp Gold APM Unrestricted File Upload Remote Code Execution VulnerabilityCVE-2024-5008EPSS 17.3%8.8 High
- progress whatsup goldWhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution VulnerabilityCVE-2024-4885In KEVPublic exploitEPSS 99.3%9.8 Critical
- progress whatsup goldWhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution VulnerabilityCVE-2024-4884EPSS 24.3%9.8 Critical
- progress whatsup goldWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityCVE-2024-4883Public exploitEPSS 64.5%9.8 Critical
- progress moveit transferMOVEit Transfer Authentication Bypass VulnerabilityCVE-2024-5806Public exploitEPSS 81.1%9.1 Critical
- progress moveit gatewayMOVEit Gateway Authentication Bypass VulnerabilityCVE-2024-58059.1 Critical
- progress sitefinityProgress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the...CVE-2023-27636Public exploit5.4 Medium
- progress telerik report server, telerik report server 2024 +1 moreRegistration Authentication Bypass VulnerabilityCVE-2024-4358In KEVPublic exploitEPSS 97.5%9.8 Critical
- progress moveit automationThe Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit LengthCVE-2024-45636.1 Medium
- progress telerik report server, telerik reporting +1 moreTrust Boundary Violation VulnerabilityCVE-2024-48375.3 Medium
- progress software telerik report server, progress telerik reporting +1 moreXML External Entity Processing Information DisclosureCVE-2024-43576.5 Medium
- progress telerik reportingProgress Telerik Reporting Local Deserialization VulnerabilityCVE-2024-42007.7 High
- progress telerik reportingProgress Telerik Reporting Local Instantiation VulnerabilityCVE-2024-42027.7 High
- progress telerik ui, telerik ui for winforms +1 moreLocal code execution vulnerability in Telerik UI for WinFormsCVE-2024-38927.2 High
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettingsCVE-2024-45625.4 Medium
- progress whatsup goldWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconControllerCVE-2024-45614.2 Medium
- kemptechnologies loadmasterLoadMaster Hardcoded SSH KeyCVE-2024-35447.5 High
- kemptechnologies loadmasterLoadMaster Reversible Password Encryption AlgorithmCVE-2024-35436.4 Medium
- progress flowmon, flowmon os +1 moreFlowmon Unauthenticated Command Injection VulnerabilityCVE-2024-2389Public exploitEPSS 93.0%10.0 Critical
- kemptechnologies loadmasterLoadMaster Cross-Site Request Forgery (CSRF)CVE-2024-2449EPSS 12.9%7.5 High
- kemptechnologies loadmasterLoadMaster Command Injection VulnerabilityCVE-2024-2448EPSS 55.4%8.4 High
- Show moreLoading…