Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

DNNSoftware — Vulnerabilities & Security Advisories 34

Browse all 34 CVE security advisories affecting DNNSoftware. AI-powered Chinese analysis, POCs, and references for each vulnerability.

DNNSoftware specializes in DNS management solutions, primarily serving enterprise environments with its PowerDNS Recursor and authoritative servers. The software has historically been associated with a significant number of vulnerabilities, currently totaling 34 CVEs. These security issues predominantly involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation or memory corruption errors within the application logic. While the platform is widely deployed for its performance and scalability, the recurring nature of these defects highlights challenges in maintaining rigorous code security standards over time. Notable incidents have included critical exploits allowing unauthenticated attackers to gain system-level access, prompting urgent patching cycles. Despite these challenges, the vendor continues to address these gaps through regular updates, though the high volume of recorded CVEs remains a point of concern for security auditors evaluating the software’s risk posture.

Found 31 results / 34 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-40321 DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload — Dnn.Platform CWE-87 8.1 High 2026-04-17
CVE-2026-40306 DNN has same HostGUID for all new installs — Dnn.Platform CWE-330 5.4AI Medium AI 2026-04-17
CVE-2026-40305 DNN has Force Friend Request Acceptance — Dnn.Platform CWE-285 4.3 Medium 2026-04-17
CVE-2026-24838 DotNetNuke.Core Vulnerable to Stored XSS via Module Title — Dnn.Platform CWE-79 9.1 Critical 2026-01-27
CVE-2026-24837 DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal — Dnn.Platform CWE-79 7.7 High 2026-01-27
CVE-2026-24836 DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes — Dnn.Platform CWE-79 7.7 High 2026-01-27
CVE-2026-24833 DotNetNuke.Core Vulnerable to Stored XSS in Module Description — Dnn.Platform CWE-79 7.7 High 2026-01-27
CVE-2026-24784 DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer — Dnn.Platform CWE-79 6.8 Medium 2026-01-27
CVE-2025-64095 DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite — Dnn.Platform CWE-434 10.0 Critical 2025-10-28
CVE-2025-64094 DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload — Dnn.Platform CWE-79 6.4 Medium 2025-10-28
CVE-2025-62802 DNN CKEditor Provider allows unauthenticated upload out-of-the-box — Dnn.Platform CWE-1188 4.3 Medium 2025-10-28
CVE-2025-59548 DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browser — Dnn.Platform CWE-79 6.1AI Medium AI 2025-09-23
CVE-2025-59547 DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscation — Dnn.Platform CWE-176 5.3 Medium 2025-09-23
CVE-2025-59821 DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile — Dnn.Platform CWE-79 6.5 Medium 2025-09-23
CVE-2025-59546 DNN Vulnerable to Stored XSS Using Backend Admin Credentials — Dnn.Platform CWE-79 2.4 Low 2025-09-23
CVE-2025-59545 DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module — Dnn.Platform CWE-79 9.1 Critical 2025-09-23
CVE-2025-59539 DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field — Dnn.Platform CWE-79 6.3 Medium 2025-09-23
CVE-2025-59535 DotNetNuke.Core allows loading of unused themes on anonymous clients through query parameters — Dnn.Platform CWE-20 6.5 Medium 2025-09-22
CVE-2025-52488 DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input — Dnn.Platform CWE-200 8.6 High 2025-06-21
CVE-2025-52487 DNN.PLATFORM possibly allows bypass of IP Filters — Dnn.Platform CWE-863 8.2AI High AI 2025-06-21
CVE-2025-52486 DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects — Dnn.Platform CWE-79 4.3AI Medium AI 2025-06-21
CVE-2025-52485 DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed — Dnn.Platform CWE-79 4.6AI Medium AI 2025-06-21
CVE-2025-48377 Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode — Dnn.Platform CWE-79 6.1AI Medium AI 2025-05-23
CVE-2025-48378 Dnn.Platform vulnerable to Stored Cross-Site Scripting (XSS) with svg files rendered inline — Dnn.Platform CWE-79 5.4AI Medium AI 2025-05-23
CVE-2025-48376 Dnn.Platform's Site Import could use an external source with a crafted request — Dnn.Platform CWE-841 3.5 Low 2025-05-23
CVE-2025-32374 Possible Denial of Service (DoS) in DNN.PLATFORM registration — Dnn.Platform CWE-770 5.9 Medium 2025-04-09
CVE-2025-32373 DNN allows a registered user to enumerate and access files they should not have access to — Dnn.Platform CWE-639 6.5 Medium 2025-04-09
CVE-2025-32372 Server-Side Request Forgery (SSRF) in DotNetNuke.Core — Dnn.Platform CWE-918 6.5 Medium 2025-04-09
CVE-2025-32371 Unexpected external content may be displayed in DNN ImageHandler — Dnn.Platform CWE-451 4.3 Medium 2025-04-09
CVE-2025-32036 DNN allows the possibility of bypassing Captcha — Dnn.Platform CWE-804 4.2 Medium 2025-04-08

This page lists every published CVE security advisory associated with DNNSoftware. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.