Lucene search
+L

24 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 11:26 a.m.•22 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2006-5035

Malware in sbrugna...

5CVSS6.4AI score0.01723EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•34 views

EUVD-2021-20569

Malware in sbrugna...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References8
OSV
OSV
•added 2021/08/14 2:00 p.m.•23 views

MGASA-2021-0401 Updated dino packages fix security vulnerability

Updated dino packages fix security vulnerability: Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators CVE-2021-33896...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References4
ArchLinux
ArchLinux
•added 2021/07/20 12:00 a.m.•164 views

[ASA-202107-35] dino: directory traversal

Arch Linux Security Advisory ASA-202107-35 ========================================== Severity: Medium Date : 2021-07-20 CVE-ID : CVE-2021-33896 Package : dino Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-2043 Summary ======= The package dino before version...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/06/09 12:00 a.m.•74 views

Dino Path Traversal Vulnerability

Dino is an open source chat client application for desktop from the Dino DINO team. Dino suffers from a path traversal vulnerability that stems from Dino prior to 0.1.2 and 0.2 failing to properly filter for special elements in the path of a resource or file. An attacker could use this...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/06/09 12:00 a.m.•36 views

FreeBSD : dino -- Path traversal in Dino file transfers (fc1bcbca-c88b-11eb-9120-f02f74d0e4bd)

Dino team reports : It was discovered that when a user receives and downloads a file in Dino, URI-encoded path separators in the file name will be decoded, allowing an attacker to traverse directories and create arbitrary files in the context of the user. %NASLMINLEVEL 70300 C Tenable Network...

5.3CVSS6AI score0.01766EPSS
SaveExploits0References4
Veracode
Veracode
•added 2021/06/08 10:09 p.m.•30 views

Directory Traversal

Dino is vulnerable to Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References8Affected Software3
OSV
OSV
•added 2021/06/07 7:15 p.m.•25 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS6.8AI score
SaveExploits0References5
NVD
NVD
•added 2021/06/07 7:15 p.m.•30 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS0.01766EPSS
SaveExploits0References5
Prion
Prion
•added 2021/06/07 7:15 p.m.•32 views

Directory traversal

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5CVSS5.2AI score0.01766EPSS
SaveExploits0References5Affected Software2
CVE
CVE
•added 2021/06/07 6:12 p.m.•118 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 is vulnerable to directory traversal via URI-encoded path separators when creating new files. The underlying issue allows a remote attacker to create files in arbitrary locations in the context of the user, by tricking them into downloading a crafted file ...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2021/06/07 6:12 p.m.•61 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.5AI score0.01766EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/06/07 6:12 p.m.•105 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2021/06/07 6:12 p.m.•132 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/07 12:00 a.m.•2 views

CVE-2021-33896: Improper Limitation of a Pathname to a Restricted Directory

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/06/07 12:00 a.m.•31 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2021/06/07 12:00 a.m.•38 views

dino -- Path traversal in Dino file transfers

Dino team reports: It was discovered that when a user receives and downloads a file in Dino, URI-encoded path separators in the file name will be decoded, allowing an attacker to traverse directories and create arbitrary files in the context of the user...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/07 12:00 a.m.•31 views

Dino 路径遍历漏洞

Dino is an open source chat client application for desktop from the Dino DINO team. Dino suffers from a path traversal vulnerability that stems from Dino prior to 0.1.2 and 0.2 failing to properly filter for special elements in the path of a resource or file. An attacker could use this...

5.3CVSS6.1AI score0.01766EPSS
SaveExploits0References7
OSV
OSV
•added 2017/10/24 6:33 p.m.•65 views

GHSA-333X-9VGQ-V2J4 Directory Traversal in geddy

Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors. Proof of Concept http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd Recommendation Update geddy to version = 13.0.8...

5CVSS9.4AI score0.09385EPSS
SaveExploits1References8
Rows per page
Query Builder