NuGet DotNetNuke.Core

Name: NuGet DotNetNuke.Core
Brand: NuGet

productUS

pkg:nuget/DotNetNuke.Core

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical8high22medium0low

updated 2026-10-27

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-9822US	high8.8OT critical	94.8% (100th)	KEV	9.1.1	2017-07-20	< 9.1.1
CVE-2018-15811US	high7.5OT critical	76.3% (100th)	KEV	9.2.2	2019-07-03	9.2.0 → 9.2.2
CVE-2018-18325US	high7.5OT critical	74.0% (99th)	KEV	9.3.0	2019-07-03	< 9.3.0
CVE-2015-2794US	critical9.8	75.1% (100th)	Exploit	7.4.1	2017-02-06	< 7.4.1
CVE-2018-18326US	high7.5	54.3% (99th)	Exploit	9.3.0	2019-07-03	< 9.3.0
CVE-2018-15812US	high7.5	47.2% (99th)	Exploit	9.2.2	2019-07-03	9.2.0 → 9.2.2
CVE-2019-12562US	medium6.1	6.15% (93rd)	Exploit	9.4.0	2019-09-26	< 9.4.0
CVE-2008-6540US	medium5.1	2.48% (84th)	Exploit	4.8.2	2009-03-30	< 4.8.2
CVE-2017-0929US	high7.5	12.5% (96th)	—	9.2.0	2018-07-03	< 9.2.0
CVE-2026-40321US	—	6.41% (94th)	—	10.2.2	2026-04-17	< 10.2.2
CVE-2013-4649US	medium4.3	2.47% (84th)	—	6.2.9	2014-03-12	2 versions
CVE-2020-5187US	high8.8	2.39% (84th)	—	9.5.0	2020-02-24	< 9.5.0
CVE-2020-5188US	medium6.5	1.85% (79th)	—	no fix	2020-02-24	≤ 9.4.4
CVE-2015-1566US	medium4.3	1.76% (78th)	—	7.4.0	2015-02-09	< 7.4.0
CVE-2022-2922US	medium4.9	1.29% (70th)	—	9.11.0	2022-09-30	< 9.11.0
CVE-2007-0660US	medium6.8	1.24% (69th)	—	03.02.01	2007-02-01	< 03.02.01
CVE-2013-7335US	medium4.3	1.17% (67th)	—	7.1.1	2014-03-12	2 versions
CVE-2018-14486US	medium6.1	1.14% (66th)	—	no fix	2019-03-21	≤ 9.1.1
CVE-2020-5186US	medium5.4	0.88% (59th)	—	no fix	2020-02-24	≤ 9.4.4
CVE-2016-7119US	medium5.4	0.66% (51st)	—	8.0.1	2016-08-31	< 8.0.1
CVE-2025-59545US	—	0.50% (42nd)	—	10.1.0	2025-09-23	< 10.1.0
CVE-2025-59535US	—	0.43% (37th)	—	10.1.0	2025-09-22	< 10.1.0
CVE-2025-32372US	high7.5	0.38% (32nd)	—	9.13.8	2025-04-09	< 9.13.8
CVE-2025-48378US	medium5.4	0.29% (22nd)	—	9.13.9	2025-05-23	< 9.13.9
CVE-2026-24837US	medium5.4	0.28% (20th)	—	10.2.0	2026-01-28	2 versions
CVE-2026-24836US	medium5.4	0.26% (17th)	—	10.02.0	2026-01-28	2 versions
CVE-2025-48377US	medium5.4	0.24% (15th)	—	9.13.9	2025-05-23	< 9.13.9
CVE-2026-24838US	medium5.4	0.22% (13th)	—	10.2.0	2026-01-28	2 versions
CVE-2025-59821US	medium6.1	0.21% (11th)	—	10.1.0	2025-09-23	< 10.1.0
CVE-2025-64094US	medium5.4	0.19% (9th)	—	10.1.1	2025-10-28	< 10.1.1
CVE-2026-24784US	medium4.8	0.19% (9th)	—	10.2.0	2026-01-28	2 versions
CVE-2025-59539US	medium5.4	0.18% (8th)	—	10.1.0	2025-09-23	< 10.1.0
CVE-2025-59546US	medium4.8	0.18% (8th)	—	10.1.0	2025-09-23	< 10.1.0
CVE-2026-40305US	—	0.18% (8th)	—	10.2.2	2026-04-17	6.0.0 → 10.2.2
CVE-2026-40306US	medium6.5OT elevated	0.18% (7th)	—	10.2.2	2026-04-17	10.0.0 → 10.2.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')18 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-264CWE-2642 CVEs
CWE-326Inadequate Encryption Strength2 CVEs
CWE-331Insufficient Entropy2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan