Approved changes feed: RSS · Atom
cpe:2.3:a:dino:dino:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dino (cf95027b-39c8-5c52-a7de-fcb3e2dfbd53) |
|---|---|
| Product | Dino (e2cb286a-eee1-5eb6-b935-7ec52062b3db) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dino/dino |
purl2cpe | 2026-06-01 10:16:26.480557 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28686 |
vulnerable | 2026-06-08 06:01:14.699987 |
Details available
Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force a victim to join a group chat; the victim may then be tricked into disclosing sensitive information.
Published: 2023-03-24T00:00:00.000Z
Updated: 2025-02-19T21:41:47.635Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33896 |
vulnerable | 2026-06-08 05:32:12.627838 |
Details available
Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.
Published: 2021-06-07T18:12:07.000Z
Updated: 2024-08-04T00:05:51.613Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16237 |
vulnerable | 2026-06-08 05:13:07.941185 |
Details available
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
Published: 2019-09-11T18:56:58.000Z
Updated: 2024-08-05T01:10:41.650Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16236 |
vulnerable | 2026-06-08 05:13:07.940430 |
Details available
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.
Published: 2019-09-11T18:57:07.000Z
Updated: 2024-08-05T01:10:41.661Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16235 |
vulnerable | 2026-06-08 05:13:07.939267 |
Details available
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
Published: 2019-09-11T18:57:20.000Z
Updated: 2024-08-05T01:10:41.635Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.