CVE-2016-7262

creationtimestamp| type| source ---|---|--- 2018-04-27 15:11:37+00:00| seen| MISP/5ae333a9-8618-4378-a17f-28c7ac12042b 2018-04-30 20:37:57+00:00| seen| MISP/5ae77951-42b4-472a-9398-69249f590eb0 2020-10-09 15:48:40+00:00| seen| MISP/b6444284-033f-48c9-a954-87af88255022 2023-06-14 21:10:03+00:00|...

CVE-2018-7602

creationtimestamp| type| source ---|---|--- 2018-04-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44542 2018-04-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=287 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44557...

CVE-2018-2628

creationtimestamp| type| source ---|---|--- 2018-04-20 20:11:37+00:00| published-proof-of-concept| https://t.me/HackerOne/1889 2018-04-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44553 2018-04-26 06:28:24+00:00| exploited| https://t.me/antichat/1326 2018-04-30 13:37:11+00:00...

CVE-2018-4932

creationtimestamp| type| source ---|---|--- 2018-04-16 07:58:04+00:00| seen| MISP/5ad4576f-d964-4248-9731-5edaac100a5a...

CVE-2018-0151

creationtimestamp| type| source ---|---|--- 2018-03-30 12:01:10+00:00| seen| https://t.me/informationsecuritychannel/15590 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-08 14:09:37+00:00| seen| https://t.me/arpsyndicate/1574 2024-12-24 20:27:48+00:00| seen|...

CVE-2018-5955

creationtimestamp| type| source ---|---|--- 2018-03-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44356 2018-04-02 08:49:29+00:00| published-proof-of-concept| https://t.me/antichat/1162 2018-05-29 15:50:33+00:00| seen|...

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

Code injection

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

Cross site scripting

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8948

CVE-2018-8948 affects MISP prior to 2.4.89, with multiple XSS flaws in app/View/Events/resolved_attributes.ctp due to a malicious MISP module. Impact is cross-site scripting; the documents do not specify exploit details or a remediation patch/version.

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

CVE-2018-8949

CVE-2018-8949 involves MISP before 2.4.89, where a flaw in app/Model/Attribute.php creates an API integrity risk that could let a user delete attributes of other events. A crafted event edit (no attribute UUIDs but with attribute IDs set) could overwrite an existing attribute, potentially impacti...

CVE-2017-9248

creationtimestamp| type| source ---|---|--- 2018-03-21 13:35:18+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/14891 2018-09-02 06:50:13+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/19908 2018-09-02 07:17:44+00:00|...

CVE-2018-7445

creationtimestamp| type| source ---|---|--- 2018-03-16 14:31:38+00:00| exploited| https://t.me/informationsecuritychannel/14481 2018-03-16 14:31:38+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/14482 2018-05-24 15:44:33+00:00| seen|...