Search for packages
| purl | pkg:nuget/DotNetNuke.Core@9.4.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3b3m-76g5-5kfm
Aliases: CVE-2022-2922 GHSA-9w72-2f23-57gm |
DNN vulnerable to Relative Path Traversal DNN (GitHub repository dnnsoftware/dnn.platform) prior to 9.11.0 is vulnerable to Relative Path Traversal. Version 9.11.0 contains a patch for this issue. |
Affected by 0 other vulnerabilities. |
|
VCID-ky3u-4syg-3yat
Aliases: CVE-2022-47053 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file. |
Affected by 0 other vulnerabilities. |
|
VCID-m5hg-ajyc-3qf1
Aliases: CVE-2020-5187 GHSA-4qf5-7xc2-wqpg |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') DNN (formerly DotNetNuke) allows Path Traversal. |
Affected by 5 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-pnw1-8knr-7qhc
Aliases: CVE-2021-40186 |
Affected by 0 other vulnerabilities. |
|
|
VCID-qscj-d21p-nfby
Aliases: CVE-2020-5186 GHSA-9phr-h5mx-4fp6 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') DNN (formerly DotNetNuke) allows XSS. |
Affected by 5 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-uc59-7c8z-6kbd
Aliases: CVE-2021-31858 |
Affected by 0 other vulnerabilities. |
|
|
VCID-y9ym-w5m9-e3bs
Aliases: CVE-2020-5188 GHSA-vjcm-j85r-7p68 |
Incorrect Resource Transfer Between Spheres DNN (formerly DotNetNuke) has Insecure Permissions. |
Affected by 5 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||