Dino

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 6
    Known Exploited: 0
    0
    Critical Level Threats
    3
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2023-28686

    Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force a victim to join a group chat; the victim may then be tricked into disclosing sensitive information.

    Last Modified: Feb 19, 2025
    Published: Mar 24, 2023

    CVE-2021-33896

    Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.

    Last Modified: Nov 21, 2024
    Published: Jun 07, 2021

    CVE-2019-16235

    Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.

    Last Modified: Nov 21, 2024
    Published: Sep 11, 2019

    CVE-2019-16236

    Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.

    Last Modified: Nov 21, 2024
    Published: Sep 11, 2019

    CVE-2019-16237

    Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.

    Last Modified: Nov 21, 2024
    Published: Sep 11, 2019
    Items Per Page
    Dino Vulnerabilities & Security CVEs | CVE-DB