https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:25:36.803938+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-00024 cnvd-2015-00024 2026-10-02T17:25:36.869590+00:00 cnvd-2015-00024 https://cve.radiocsirt.org/vuln/euvd-2026-98278 EUVD-2026-98278 2026-10-02T17:25:36.869626+00:00 EUVD-2026-98278 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2217 fkie_cve-2014-2217 2026-10-02T17:25:36.869640+00:00

Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.

 https://cve.radiocsirt.org/vuln/ghsa-8wc5-2r9c-cj2g GHSA-8wc5-2r9c-cj2g 2026-10-02T17:25:36.869678+00:00

Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.

 https://cve.radiocsirt.org/vuln/gsd-2014-2217 gsd-2014-2217 2026-10-02T17:25:36.869695+00:00 gsd-2014-2217 https://cve.radiocsirt.org/vuln/icsa-21-077-03 ICSA-21-077-03 — Hitachi ABB Power Grids eSOMS Telerik 2026-10-02T17:25:36.869706+00:00

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request.CVE-2019-19790 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known.CVE-2019-18935 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.CVE-2017-11357 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.CVE-2017-11317 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/P…