Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.0Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module).EPSS 0.4%Oct 14, 2026
- High7.5Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module).EPSS 0.4%Oct 14, 2026
- High7.2Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).EPSS 0.5%Oct 14, 2026
- High7.3Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer.EPSS 0.2%Oct 14, 2026
- High7.5Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer.EPSS 0.4%Oct 14, 2026
- High7.5Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.EPSS 0.3%Oct 14, 2026
- High7.5Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module).EPSS 0.2%Oct 14, 2026
- High7.5Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).EPSS 0.4%Oct 14, 2026
- High7.5Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).EPSS 0.4%Oct 14, 2026
- High8.1Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).EPSS 0.5%Oct 14, 2026
- High8.8Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer.EPSS 0.6%Oct 14, 2026
- High8.8Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer.EPSS 0.1%Oct 14, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityKEVEPSS 77.4%Jun 4, 2026
- High7.5Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.May 20, 2026
- High7.5Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data.May 20, 2026
- High7.5Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding.May 20, 2026
- High7.5Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.May 20, 2026
- High8.8Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation.Apr 30, 2026
- Critical9.8Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass.Apr 30, 2026
- Critical9.8In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state…Apr 22, 2026
- High7.5In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed th…Apr 22, 2026
- Medium5.9In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyncUpload, where a predictable temporary identifi…Feb 25, 2026
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityKEVEPSS 93.0%Aug 29, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityKEVEPSS 99.3%Jun 25, 2024
- Critical9.8Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityKEVEPSS 97.5%May 29, 2024
30 records · page 1 of 2
PreviousNext