Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:nuget/DotNetNuke.Core@9.2.2
Typenuget
Namespace
NameDotNetNuke.Core
Version9.2.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version9.11.0
Latest_non_vulnerable_version10.2.2
Affected_by_vulnerabilities
0
url VCID-uk5d-ubkt-6fhn
vulnerability_id VCID-uk5d-ubkt-6fhn
summary 
Insufficient Entropy
DNN (aka DotNetNuke) incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.
references
0
reference_url http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18326
reference_id
reference_type
scores
0
value 0.75829
scoring_system epss
scoring_elements 0.98929
published_at 2026-06-05T12:55:00Z
1
value 0.75829
scoring_system epss
scoring_elements 0.98927
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18326
2
reference_url https://github.com/dnnsoftware/Dnn.Platform/releases
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dnnsoftware/Dnn.Platform/releases
3
reference_url https://www.dnnsoftware.com/community/security/security-center
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.dnnsoftware.com/community/security/security-center
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-18326
reference_id CVE-2018-18326
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-18326
5
reference_url https://github.com/advisories/GHSA-xx3h-j3cx-8qfj
reference_id GHSA-xx3h-j3cx-8qfj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xx3h-j3cx-8qfj
fixed_packages
0
url pkg:nuget/DotNetNuke.Core@9.3.0
purl pkg:nuget/DotNetNuke.Core@9.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3e7c-8uk1-ruch
1
vulnerability VCID-m5hg-ajyc-3qf1
2
vulnerability VCID-qscj-d21p-nfby
3
vulnerability VCID-y9ym-w5m9-e3bs
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.3.0
aliases CVE-2018-18326, GHSA-xx3h-j3cx-8qfj
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uk5d-ubkt-6fhn
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.2.2