Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Dino

First CVE: Sep 15, 2008Active for: 18 yearsTotal CVEs: 6

Dino is a niche collaboration and discussion-board platform whose vulnerability profile centers on access-control and path-handling weaknesses including path traversal, origin validation errors, authorization bypass through user-controlled keys, and missing authorization checks. The vendor's disclosures frequently acquire public exploit code, underscoring the appeal of web-facing discussion platforms to researchers and attackers. Current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
0.8
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 10% of tracked vendors
7.0
Avg CVSS Score
Higher Avg CVSS Score than 49% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Dino over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 15, 2008
17 years ago
Most Recent CVE
Mar 24, 2023
1,218 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2008-4075MEDIUM
Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter.
Sep 15, 20086.827NOYES
CVE-2019-16236HIGH
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.
Sep 11, 20197.525NONO
CVE-2019-16237HIGH
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
Sep 11, 20197.524NONO
CVE-2019-16235HIGH
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
Sep 11, 20197.524NONO
CVE-2023-28686HIGH
Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of g
Mar 24, 20237.123NONO
CVE-2021-33896MEDIUM
Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.
Jun 7, 20215.319NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
33%
67%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network5 (83.3%)
Unknown1 (16.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (83.3%)
High0 (0.0%)
Unknown1 (16.7%)
User Interaction
None4 (66.7%)
Unknown1 (16.7%)
Required1 (16.7%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None5 (83.3%)
Unknown1 (16.7%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
16.7% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Dino.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Dino — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Dino's Products

View all 1 CNAs →

Top CWEs