devexpress devexpress vulnerabilities and exploits

(subscribe to this query)

This vulnerability allows remote malicious users to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specific flaw exists within the SafeBinaryFormatter library. The issue results from the lack of proper...

Devexpress Devexpress Devexpress Devexpress 22.1.0

DevExpress.XtraReports.UI through v21.1 allows malicious users to execute arbitrary code via insecure deserialization.

Devexpress Devexpress

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC prior to 13.1.10 and 13.2.x prior to 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. (dot dot) in the __EVENTARGUM...

Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.3 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.12 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.5 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.4 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.7 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.5 Devexpress Aspxfilemanager Control For Webforms And Mvc 12.1.12 Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.8 Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.6 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.9 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.8 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.12 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.11 Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.5 Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.4 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.7 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.6 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.10 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.8 Devexpress Aspxfilemanager Control For Webforms And Mvc 12.1.7 Devexpress Aspxfilemanager Control For Webforms And Mvc 12.1.6 Devexpress Aspxfilemanager Control For Webforms And Mvc 12.2.11

1 EDB exploit

Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlToolkit) prior to 15.1 allows remote malicious users to write to arbitrary files via a .. (dot dot) in the fileId parameter to AjaxFileUploadHandler.axd.

Devexpress Ajax Control Toolkit

The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter. This leads to an Insecure Direct Object References (IDOR) vulnerability which allows malicious users...

Devexpress Asp.net Web Forms Controls 19.2.3

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook