Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Telerik Component: Ui For Wpf Clear all filters
TI-2024-09358 CVE-2024-10095 · GHSA-3gpq-5q6x-q7pf

Progress UI for WPF format provider unsafe deserialization vulnerability

Priority MEDIUM 44

In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0075 Published 2024-12-16 Fixed in 2024.4.1213 CWE-502
TI-2024-07021 CVE-2024-7576 · GHSA-3x94-47mg-35rf

Progress UI for WPF format provider unsafe deserialization vulnerability

Priority MEDIUM 43

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2024-09-25 Fixed in 2024.3.924 CWE-502
TI-2024-07020 CVE-2024-7575 · GHSA-jp9w-w77g-78h3

Improper neutralization special element in hyperlinks

Priority MEDIUM 44

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2024-09-25 Fixed in 2024.3.924 CWE-77
TI-2024-07118 CVE-2024-7679 · GHSA-4wh3-4hcw-ph3f

Improper neutralization special element in hyperlinks

Priority LOW 37

In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00744 Published 2024-09-25 Fixed in 2024.3.924 CWE-77