CVE Intelligence

Nuget DotNetNuke.Core vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nuget DotNetNuke.Core: 3 record(s), with affected versions and fixes.

CVE-2018-18325 High · 7.5 KEV Urgent · 79 Public exploit CWE-326 Jul 3, 2019
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
CVE-2018-15811 High · 7.5 KEV Urgent · 79 Public exploit CWE-326 Jul 3, 2019
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
CVE-2017-9822 High · 8.8 KEV Urgent · 86 Public exploit Ransomware CWE-94 Jul 20, 2017
DotNetNuke (DNN) Remote Code Execution Vulnerability
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."