341 matches found
Code injection
DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...
CVE-2018-18326
Summary: CVE-2018-18326 affects DNN (DotNetNuke) 9.2 through 9.2.2, which incorrectly converts encryption key source values, yielding lower entropy. This issue is noted as stemming from an incomplete fix for CVE-2018-15812. The connected sources identify the vulnerable versions and link to relate...
CVE-2018-18325
DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811...
CVE-2018-18325
Summary: CVE-2018-18325 affects DNN (DotNetNuke) platforms running version 9.2 through 9.2.2. The issue is an inadequate encryption strength for input parameters, arising from an incomplete fix for CVE-2018-15811. The vulnerability is tied to the use of a weak encryption algorithm in protecting i...
CVE-2018-15812
CVE-2018-15812 affects DNN (DotNetNuke) versions 9.2 through 9.2.1. The issue arises from incorrect conversion of encryption key source values, yielding lower than expected entropy in keys. The documents describe related advisories (GHSA, OSV) and OpenVAS entries referencing the same entropy prob...
CVE-2018-15811
CVE-2018-15811 – DNN series (DotNetNuke) vulnerable to weak encryption . The provided sources confirm that DNN platforms running 9.2 through 9.2.2 use a weak encryption algorithm to protect input parameters (notably in cookies), representing a vulnerability in the protection of parameter data. Th...
CVE-2018-15811
DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...
CVE-2018-15811
DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...
CVE-2018-18326: Insufficient Entropy
DNN aka DotNetNuke 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812...
CVE-2018-18325: Inadequate Encryption Strength
DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811...
CVE-2018-15811
DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2018-15811: Inadequate Encryption Strength
DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...
CVE-2018-15812: Insufficient Entropy
DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...
DNN (DotNetNuke) 7.0.0 < 9.3.1 Multiple Vulnerabilities
The version of DNN Platform formerly DotNetNuke running on the remote host is 7.0.0 or later but prior to 9.3.1. It is, therefore, affected by multiple vulnerabilities including the following: - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input befo...
CVE-2018-14486
DNN formerly DotNetNuke 9.1.1 allows cross-site scripting XSS via XML...
CVE-2018-14486
DNN formerly DotNetNuke 9.1.1 allows cross-site scripting XSS via XML...
Cross site scripting
DNN formerly DotNetNuke 9.1.1 allows cross-site scripting XSS via XML...
CVE-2018-14486
CVE-2018-14486 affects DNN (DotNetNuke) 9.1.1, where XML handling enables Cross-Site Scripting (XSS). The Red Hat and Snyk entries corroborate XSS in DNN 9.1.1 via XML, but the provided documents do not specify a fixed version or explicit remediation. Practical impact is XSS exposure in web appli...