341 matches found
CVE-2021-40186: Server-Side Request Forgery (SSRF)
The AppCheck research team identified a Server-Side Request Forgery SSRF vulnerability within the DNN CMS platform, formerly known as DotNetNuke. SSRF vulnerabilities allow the attacker to exploit the target system to make network requests on their behalf, allowing a range of possible attacks. In...
GHSA-4QF5-7XC2-WQPG DNN Path Traversal via Zip Slip
DNN formerly DotNetNuke through 9.4.4 allows Path Traversal via unsafe handling of zip files...
DNN Path Traversal via Zip Slip
DNN formerly DotNetNuke through 9.4.4 allows Path Traversal via unsafe handling of zip files...
DNN File Upload Vulnerability
DNN formerly DotNetNuke through 9.4.4 has a File upload vulnerability via bypassing client-side file extension check...
GHSA-VJCM-J85R-7P68 DNN File Upload Vulnerability
DNN formerly DotNetNuke through 9.4.4 has a File upload vulnerability via bypassing client-side file extension check...
GHSA-9PHR-H5MX-4FP6 DNN XSS Vulnerability
DNN formerly DotNetNuke through 9.4.4 allows XSS issue 1 of 2...
DNN XSS Vulnerability
DNN formerly DotNetNuke through 9.4.4 allows XSS issue 1 of 2...
GHSA-M6W9-8CXC-JFF7 DNN XSS Vulnerability
DNN formerly DotNetNuke 9.1.1 allows cross-site scripting XSS via XML...
DNN XSS Vulnerability
DNN formerly DotNetNuke 9.1.1 allows cross-site scripting XSS via XML...
The vulnerability of the DNN CMS system, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.
The vulnerability of the DNN CMS system is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
DNN (DotNetNuke) 9.2 <= 9.2.2 Weak Encryption Algorithm Vulnerability
The version of DNN Platform formerly DotNetNuke running on the remote host is 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...
The vulnerability of the `dnn_execute_layer_pad` function in the `libavfilter/dnn/dnn_backend_native_layer_pad.c` file of the FFmpeg multimedia library, related to buffer overflow in memory, allows an attacker to access confidential data, compromise its integrity, and cause a service failure.
The vulnerability of the dnnexecutelayerpad function in the libavfilter/dnn/dnnbackendnativelayerpad.c file of the FFmpeg multimedia library is related to buffer overflows in memory due to insufficient size checking during the memcpy operation. Exploiting this vulnerability can allow an attacker ...
Cross site scripting
An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser...
2sic 2sxc 跨站脚本漏洞
2sic 2sxc is a software package that can be used for almost any type of content management need or application development need. A cross-site scripting vulnerability exists in 2sic 2sxc prior to version 11.22, which stems from an XSS vulnerability in the "sxcver" parameter of "dnn/ui.html", which...
CVE-2020-26885: Improper Neutralization of Input During Web Page Generation
An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser...
DEBIAN-CVE-2020-24020
Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...
CVE-2020-24020
Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...
FFMpeg 安全漏洞
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c in FFmpeg version 4.2.3. The...