Skip to content
Noroxi

dino records

6 published records for vendor dino.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
83.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2019-16236
    31Monitor

    Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.

    HighCVSS 7.5No exploitEPSS 2%

    dino · dinoSep 11, 2019

  • CVE-2019-16235
    30Monitor

    Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.

    HighCVSS 7.5No exploitEPSS 1%

    dino · dinoSep 11, 2019

  • CVE-2019-16237
    30Monitor

    Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.

    HighCVSS 7.5No exploitEPSS 1%

    dino · dinoSep 11, 2019

  • CVE-2008-4075
    28Monitor

    Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a ..

    MediumCVSS 6.8Proof of conceptEPSS 1%

    dino · d-iscussion boardSep 15, 2008

  • CVE-2023-28686
    28Monitor

    Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message.

    HighCVSS 7.1No exploitEPSS 0%

    dino · dinoMar 24, 2023

  • CVE-2021-33896
    22Monitor

    Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.

    MediumCVSS 5.3No exploitEPSS 1%

    dino · dinoJun 7, 2021