Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-28214

Malicious code in bioql PyPI...

3.5CVSS6.3AI score0.00101EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/09/17 4:52 p.m.7 views

CVE-2025-43792

Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not properly obtain the remote address of the live site from th...

2.3CVSS6.7AI score0.00066EPSS
Exploits0References1
Snyk
Snyk
added 2025/05/23 4:45 p.m.1 views

Improper Enforcement of Behavioral Workflow

Overview DotNetNuke.SiteExportImport is an A package containing components required for developing extensions to utilize site export/import features of DotNetNuke. Affected versions of this package are vulnerable to Improper Enforcement of Behavioral Workflow via the site import feature. A...

4.6CVSS6.8AI score0.00101EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/05/23 4:11 p.m.11 views

DNN site Import could use an external source with a crafted request

A malicious SuperUser Host could craft a request to use an external url for a site export to then be imported...

3.5CVSS6.7AI score0.00101EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/05/23 4:11 p.m.2 views

GHSA-62MF-VHHW-XMF8 DNN site Import could use an external source with a crafted request

A malicious SuperUser Host could craft a request to use an external url for a site export to then be imported...

3.5CVSS6.9AI score0.00101EPSS
Exploits0References4
CVE
CVE
added 2025/05/23 3:37 p.m.67 views

CVE-2025-48376

CVE-2025-48376 affects DNN (DotNetNuke) prior to 9.13.9. A malicious SuperUser (Host) could craft a request to use an external URL for a site export, which could then be imported. The issue is fixed in version 9.13.9. Other related issues (CVE-2025-48377, CVE-2025-48378) are reported by Nessus bu...

3.5CVSS3.8AI score0.00101EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/05/23 3:37 p.m.18 views

CVE-2025-48376 Dnn.Platform's Site Import could use an external source with a crafted request

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser Host could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue...

3.5CVSS6.4AI score0.00101EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.1 views

DNN 安全漏洞

DNN aka DotNetNuke is a Microsoft-supported, open-source content management system CMS based on the ASP.NET platform from the U.S. company DNN. The system is easy to install, scalable, feature-rich and so on. A security vulnerability exists in DNN versions prior to 9.13.9, which originates from a...

3.5CVSS6.3AI score0.00101EPSS
Exploits0References4
Rows per page
Query Builder