Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: DumbWareio Clear all filters
TI-2026-33046 CVE-2026-45231 · GHSA-9ccf-75hj-3v32

DumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fields

Priority LOW 23

DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that are stored without server-side sanitization and rendere…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00186 Published 2026-05-18 No fix listed CWE-79
TI-2026-33045 CVE-2026-45230 · GHSA-7x5q-37jc-hq6p

DumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-file

Priority MEDIUM 45

DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated attackers to delete arbitrary files by supplying ../…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00626 Published 2026-05-18 No fix listed CWE-22
TI-2025-30322 CVE-2025-47929

DumbDrop vulnerable to DOM XSS via file upload

Priority MEDIUM 50

DumbDrop, a file upload application that provides an interface for dragging and dropping files, has a DOM cross-site scripting vulnerability in the upload functionality prior to commit db27b25372eb9071e63583d8faed2111a2b…

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00412 Published 2025-05-15 No fix listed CWE-79