Dotnetnuke

Every one of the 39 is a mark on the map. Named now: 1 to 26, most at risk first.

1. DotNetNuke 07.04.00 - Administration Authentication BypassCVE-2015-2794Dnnsoftware · 75% likely

   CWE-264

2. DotNetNuke (DNN) ImageHandler <9.2.0 - Server-Side Request ForgeryCVE-2017-0929Dnnsoftware · 13% likely

   CWE-918

3. DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplet…CVE-2018-18326Dnnsoftware · 54% likely

   CWE-331

4. DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.CVE-2018-15812Dnnsoftware · 47% likely

   CWE-331

5. Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit…CVE-2019-12562Dnnsoftware · 6.2% likely

   CWE-79

6. DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the…CVE-2008-6540Dnnsoftware · 2.5% likely

   CWE-264

7. Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable…CVE-2013-4649Dnnsoftware · 2.5% likely

   CWE-79

8. ** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gain privileges via unspecified vectors, as…CVE-2006-3601Dnnsoftware · 2.5% likely
9. DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2).CVE-2020-5187Dnnsoftware · 2.4% likely

   CWE-22

10. Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors.CVE-2008-6399Dnnsoftware · 1.9% likely

    CWE-264

11. Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject a…CVE-2006-4973Dnnsoftware · 1.9% likely
12. DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions.CVE-2020-5188Dnnsoftware · 1.9% likely

    CWE-434

13. Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2015-1566Dnnsoftware · 1.8% likely

    CWE-79

14. Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search term…CVE-2009-4110Dnnsoftware · 1.7% likely

    CWE-79

15. Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uplo…CVE-2008-6542Dnnsoftware · 1.6% likely
16. Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.CVE-2008-6644Dnnsoftware · 1.5% likely

    CWE-79

17. Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __V…CVE-2010-4514Dnnsoftware · 1.5% likely

    CWE-79

18. DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parame…CVE-2008-7102Dnnsoftware · 1.4% likely

    CWE-20

19. DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET req…CVE-2004-2323Dnnsoftware · 1.4% likely
20. Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) register a new user page,…CVE-2005-0040Dnnsoftware · 1.3% likely
21. Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information (portal number) by accessing the install wizard page via…CVE-2008-7101Dnnsoftware · 1.3% likely
22. The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows…CVE-2009-4109Dnnsoftware · 1.2% likely

    CWE-200

23. SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field…CVE-2004-2324Dnnsoftware · 1.2% likely
24. Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique…CVE-2008-7100Dnnsoftware · 1.2% likely
25. Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to inject arbitrary web script…CVE-2004-2325Dnnsoftware · 1.2% likely
26. Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via…CVE-2013-7335Dnnsoftware · 1.2% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.