CVE-2020-13381

creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00| seen|...

CVE-2020-13383

creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:24+00:00| seen|...

CVE-2020-13382

creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00| seen|...

CVE-2020-9498

creationtimestamp| type| source ---|---|--- 2020-07-02 12:02:20+00:00| seen| https://t.me/thehackernews/749 2020-07-05 21:09:55+00:00| seen| https://t.me/YemenShield/16 2020-07-08 03:48:03+00:00| seen| https://t.me/cKure/1146 2024-11-14 06:07:04+00:00| seen| MISP/431469bf-485c-473f-b10a-0f7f9544b...

CVE-2020-9497

creationtimestamp| type| source ---|---|--- 2020-07-02 12:02:20+00:00| seen| https://t.me/thehackernews/749 2020-07-05 21:09:55+00:00| seen| https://t.me/YemenShield/16 2020-07-08 03:48:03+00:00| seen| https://t.me/cKure/1146 2024-09-25 20:47:41+00:00| published-proof-of-concept|...

CVE-2020-10923

creationtimestamp| type| source ---|---|--- 2020-07-01 20:12:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgearr6700passreset.rb 2020-07-28 22:55:23+00:00| seen| https://t.me/cibsecurity/13714 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-10924

creationtimestamp| type| source ---|---|--- 2020-07-01 20:12:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgearr6700passreset.rb 2020-07-28 22:55:22+00:00| seen| https://t.me/cibsecurity/13713 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-2034

creationtimestamp| type| source ---|---|--- 2020-06-30 14:21:48+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittinen-haavoittuvuus-palo-alton-verkkolaitteissa 2020-07-13 17:35:05+00:00| seen| https://t.me/SecLabNews/8054 2020-09-14 11:10:04+00:00| published-proof-of-concept|...

CVE-2020-15411

An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...

CVE-2020-15412

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

CVE-2020-15412

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

CVE-2020-15411

An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...

Design/Logic Flaw

An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...

Design/Logic Flaw

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

CVE-2020-15412

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

CVE-2020-15412

The CVE-2020-15412 issue affects MISP 2.4.128 where app/Controller/EventsController.php lacks an event ACL check before allowing a user to submit an event contact form. This is reported across multiple sources (NVD entry and RH/CVE detail) and framed as an ACL authorization flaw in the event subm...

CVE-2020-15411

CVE-2020-15411 affects MISP 2.4.128; the vulnerability stems from insufficient ACL checks in the file app/Controller/AttributesController.php within the Attachment Downloader. The NVD entry shows a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack, no privileges required, no user interact...

CVE-2020-15411

An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...

CVE-2020-2021

creationtimestamp| type| source ---|---|--- 2020-06-29 18:16:29+00:00| seen| https://t.me/avdno/790 2020-06-29 21:35:28+00:00| seen| https://t.me/cKure/1047 2020-06-30 06:03:40+00:00| exploited| https://t.me/cKure/1050 2020-06-30 11:25:12+00:00| seen| https://t.me/truesecator/712 2020-06-30...

CVE-2019-12169

creationtimestamp| type| source ---|---|--- 2020-06-29 17:08:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atutoruploadtraversal.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:11+00:00| seen|...