Progress Software · weakness class
Denial of Service
19 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- likely to be exploited
- 1
Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.
- WhatsUp Gold TestController Chart denial of service vulnerability
- WhatsUp Gold InstallController Denial-of-Service Vulnerability
- Uncontrolled Resource Consumption in Telerik UI for ASP.NET Core Server-side Aggregation
- Memory leak in SFTP service can result in a denial of service in MOVEit Transfer
- AS2 module allows uncontrolled file uploads
- XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX
- Telerik Document Processing Improper Handling of Memory Resources
- Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
- Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation
- Unauthenticated XFT Memory Exhaustion in Progress WS_FTP Server
CWE-7701 article1 article this week: Progress fixes five WS_FTP Server flaws exposing sensitive data
- Uncontrolled Recursion in Telerik UI for ASP.NET Core FilterParser
- Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation
- Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation
- Uncontrolled resource consumption of anonymous endpoints
- Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
- Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
- Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX
- Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server
- Infinite Loop in Telerik Document Processing XLS Import
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.