Dumbwareio

5 CVEs across 2 Dumbwareio products. Browse Dumbwareio vulnerabilities, severities, and proof-of-concept exploits.

Dumbwareio products with known CVEs

ProductCVEs
Dumbdrop3
Dumbassets2
Dumbwareio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45231Medium6.12026-05-18DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags…
CVE-2026-45230Critical9.12026-05-18DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthen…
CVE-2025-479292025-05-15DumbDrop, a file upload application that provides an interface for dragging and dropping files, has a DOM cross-site scripting vulnerability in the upload func…
CVE-2025-249712025-02-04DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was disco…
CVE-2025-24891Critical9.62025-01-31Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traversal vulnerability to overwrite arbitrar…