Lucene search
GoogleOSV:GHSA-J3G9-6FX5-GJV7HistoryJul 05, 2019 - 9:08 p.m.
Inadequate Encryption Strength in DotNetNuke
2019-07-0521:08:16
Google
osv.dev
23
EPSS
0.052
Percentile
93.1%
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
Related
cisa_kev
cisa_kev
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
2021-11-03 00:00:00
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
2021-11-03 00:00:00
cvelist
cvelist
CVE-2018-18325
2019-07-03 16:37:17
CVE-2018-15811
2019-07-03 16:23:27
cve
cve
CVE-2018-18325
2019-07-03 17:15:10
CVE-2018-15811
2019-07-03 17:15:10
github
github
Inadequate Encryption Strength in DotNetNuke
2019-07-05 21:08:16
Inadequate Encryption Strength in DotNetNuke
2019-07-05 21:08:36
nvd
nvd
CVE-2018-18325
2019-07-03 17:15:10
CVE-2018-15811
2019-07-03 17:15:10
nessus
nessus
DNN (DotNetNuke) 9.2 <= 9.2.2 Weak Encryption Algorithm Vulnerability
2021-10-29 00:00:00
attackerkb
attackerkb
CVE-2018-18325
2019-07-03 00:00:00
veracode
veracode
Information Disclosure
2019-07-04 03:23:34
Information Disclosure
2019-07-04 04:08:03
prion
prion
Code injection
2019-07-03 17:15:00
Design/Logic Flaw
2019-07-03 17:15:00
osv
osv
CVE-2018-18325
2019-07-03 17:15:10
Inadequate Encryption Strength in DotNetNuke
2019-07-05 21:08:36
CVE-2018-15811
2019-07-03 17:15:10
openvas
openvas
DotNetNuke < 9.3.0 Multiple Vulnerabilities
2022-08-08 00:00:00
DotNetNuke 9.2.x < 9.2.2 Multiple Vulnerabilities
2022-08-08 00:00:00
exploitdb
exploitdb
DotNetNuke - Cookie Deserialization Remote Code Execution (Metasploit)
2020-04-16 00:00:00
zdt
zdt
DotNetNuke Cookie Deserialization Remote Code Execution Exploit
2020-04-03 00:00:00
metasploit
metasploit
DotNetNuke Cookie Deserialization Remote Code Excecution
2019-07-16 16:16:53
packetstorm
packetstorm
DotNetNuke Cookie Deserialization Remote Code Execution
2020-04-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Dnnsoftware DotNetNuke Remote Code Execution (CVE-2018-15811)
2021-12-16 00:00:00