Export limit exceeded: 16394 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 54

Export CSV
CVE-2026-65939

WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Whatsup Gold Whatsup Gold
CVE-2026-65940

WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Whatsup Gold Whatsup Gold
CVE-2026-9272

Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS

In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the Anomaly Detection System (ADS) may send specially crafted requests that could result in unauthorized access to application data and its modification.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Anomaly Detection System Flowmon Ads
CVE-2026-8079

Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Flowmon
CVE-2026-2737

Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web application

A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Flowmon
CVE-2024-9999

Multi-Factor Authentication Bypass in Progress WS_FTP Server

In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Progress Software
Products
Ws Ftp Server
CVE-2026-3692

Unintended command execution during report generation in Progress Flowmon

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Flowmon
CVE-2024-8014

Telerik Reporting EntityDataSource Insecure Type Resolution

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Telerik Reporting Telerik Reporting
CVE-2024-4358

Registration Authentication Bypass Vulnerability

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

CVSS 3.1 · 9.8 Critical EPSS 97.5% KEV · Listed
Vendors
Progress Software Telerik
Products
Telerik Report Server Report Server 2024