341 matches found
Availability Attacks against Neural Networks
New research on using specially crafted inputs to slow down machine-learning neural network systems: Sponge Examples: Energy-Latency Attacks on Neural Networks shows how to find adversarial examples that cause a DNN to burn more energy, take more time, or both. They affect a wide range of DNN...
Dotnetnuke 7.0.x < 9.5.0 XSS
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is 7.0.x prior to 9.5.0. It is, therefore, affected by a XSS vulnerability. - For websites with user registration enabled, it is possible for a user to craft a registration that would inject...
U.S. Dept Of Defense: Remote Code Execution through DNN Cookie Deserialization
Summary: The application at https://████████ presents a deserialization vulnerability that permits RCE and file read/write Step-by-step Reproduction Instructions 1. Navigate to a random page that must return a 404 Error status like https://████/test 2. Add this cookie in the request header:...
CVE-2020-11585
There is an information disclosure issue in DNN formerly DotNetNuke 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager other than ones contained in a secure folder by sending themselves a message...
CVE-2020-11585
There is an information disclosure issue in DNN formerly DotNetNuke 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager other than ones contained in a secure folder by sending themselves a message...
Information disclosure
There is an information disclosure issue in DNN formerly DotNetNuke 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager other than ones contained in a secure folder by sending themselves a message...
CVE-2020-11585
There is an information disclosure issue in DNN formerly DotNetNuke 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager other than ones contained in a secure folder by sending themselves a message...
CVE-2020-11585
CVE-2020-11585 affects DNN (DotNetNuke) 9.5 in the built-in Activity-Feed/Messaging/Userid/Message Center module. A registered user can enumerate arbitrary files in the Admin File Manager (excluding secure folders) by sending themselves a message with a file attached, utilizing an arbitrary small...
CVE-2020-11585: Use of Insufficiently Random Values
There is an information disclosure issue in DNN formerly DotNetNuke 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager other than ones contained in a secure folder by sending themselves a message...
Directory Traversal
DNN is vulnerable to directory traversal. A zip slip vulnerability due to the lack of validation of file names in a zip file allows an attacker to write or overwrite arbitrary files on the system...
CVE-2020-5187
DNN formerly DotNetNuke through 9.4.4 allows Path Traversal issue 2 of 2...
Path traversal
DNN formerly DotNetNuke through 9.4.4 allows Path Traversal issue 2 of 2...
Cross site scripting
DNN formerly DotNetNuke through 9.4.4 allows XSS issue 1 of 2...
Design/Logic Flaw
DNN formerly DotNetNuke through 9.4.4 has Insecure Permissions...
CVE-2020-5186
CVE-2020-5186 maps to a DNN (DotNetNuke) XSS issue in versions up to 9.4.4. The core description in the initial document states XSS (issue 1 of 2) for DNN 9.4.4. Connected documents corroborate a DNN XSS vulnerability; no explicit exploitation details, impact metrics, or patched version are provi...
CVE-2020-5186
DNN formerly DotNetNuke through 9.4.4 allows XSS issue 1 of 2...
CVE-2020-5187
DNN formerly DotNetNuke through 9.4.4 allows Path Traversal issue 2 of 2...
CVE-2020-5187
CVE-2020-5187 affects DNN (DotNetNuke) up to version 9.4.4, where path traversal was reported. Multiple connected sources describe a zip-slip/path-traversal issue arising from unsafe handling/validation of file paths during archive extraction, enabling an attacker to access or overwrite files out...
CVE-2020-5188
CVE-2020-5188 affects DNN (DotNetNuke) up to version 9.4.4, where an insecure permissions issue is reported. The root cause is improper/weak permission handling within the DNN platform, enabling a scenario where an attacker could abuse file permissions (as indicated by CVSS details with high inte...