Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

telerik / ui_for_asp.net_ajax CVEs

Beta · best-effort

3 CVEs tagged to telerik / ui_for_asp.net_ajax — 3 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to telerik vendor archive

CVE-2019-18935

Published Dec 11, 2019

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys…

CVSS 9.8 · Critical
evidence mentions
18
Buzz score
68.9
KEV listed
Vendor/product tagsBeta · best-effort

CVE-2017-11317

Published Aug 23, 2017

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbit…

CVSS 9.8 · Critical
evidence mentions
8
Buzz score
61.5
KEV listed
Vendor/product tagsBeta · best-effort

CVE-2017-9248

Published Jul 3, 2017

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryption…

CVSS 9.8 · Critical
evidence mentions
5
Buzz score
58.4
KEV listedPublic PoC observed
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1