https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:39:50.202589+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00797 bdu:2020-00797 2026-10-02T13:39:50.207378+00:00 bdu:2020-00797 https://cve.radiocsirt.org/vuln/cnvd-2020-22815 cnvd-2020-22815 2026-10-02T13:39:50.207409+00:00 cnvd-2020-22815 https://cve.radiocsirt.org/vuln/euvd-2026-256165 EUVD-2026-256165 2026-10-02T13:39:50.207425+00:00 EUVD-2026-256165 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18935 fkie_cve-2019-18935 2026-10-02T13:39:50.207437+00:00

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote code execution. (As of 2020.1.114, a default setting prevents the exploit. In 2019.3.1023, but not earlier versions, a non-default setting can prevent exploitation.)

 https://cve.radiocsirt.org/vuln/ghsa-c655-3j45-33xw GHSA-c655-3j45-33xw 2026-10-02T13:39:50.207465+00:00

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote code execution. (In 2019.3.1023 but not earlier versions, a non-default setting can prevent exploitation.)

 https://cve.radiocsirt.org/vuln/gsd-2019-18935 gsd-2019-18935 2026-10-02T13:39:50.207483+00:00 gsd-2019-18935 https://cve.radiocsirt.org/vuln/icsa-21-077-03 ICSA-21-077-03 — Hitachi ABB Power Grids eSOMS Telerik 2026-10-02T13:39:50.207494+00:00

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request.CVE-2019-19790 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known.CVE-2019-18935 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.CVE-2017-11357 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.CVE-2017-11317 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/P…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1015 WID-SEC-W-2023-1015 — Oracle Health Sciences Applications: Mehrere Schwachstellen 2026-10-02T13:39:50.207532+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Health Sciences Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.