DotNetNuke.Core

5 results · Clear filters · Feed

• High 7.5
  CVE-2018-18326 Public exploit EPSS 54%

  Insufficient Entropy in DotNetNuke

  DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.

  DotNetNuke.Core NuGet
  Jul 3, 2019
• High 7.5
  CVE-2018-18325 Exploited Public exploit EPSS 74%

  Inadequate Encryption Strength in DotNetNuke

  DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.

  DotNetNuke.Core NuGet
  Jul 3, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2018-15812 Public exploit EPSS 47%

  Insufficient Entropy in DotNetNuke

  DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

  DotNetNuke.Core NuGet
  Jul 3, 2019
• High 7.5
  CVE-2018-15811 Exploited Public exploit EPSS 76%

  Inadequate Encryption Strength in DotNetNuke

  DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

  DotNetNuke.Core NuGet
  Jul 3, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2017-9822 Exploited · Ransomware Public exploit EPSS 95%

  DNN (aka DotNetNuke) has Remote Code Execution via a cookie

  DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."

  DotNetNuke DotNetNuke CMS Fixed in 9.1.1 DotNetNuke.Core NuGet
  Jul 20, 2017

  KEV Nov 3, 2021