CVE-2023-28607

CVE-2023-28607 affects the MISP project. The issue is a cross-site scripting (XSS) vulnerability in the JavaScript file js/event-graph.js (in MISP) that is exploitable via the event-graph relationship tooltip. Affected versions are MISP prior to 2.4.169; upgrading to 2.4.169 or later is recommend...

CVE-2023-28607

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

CVE-2023-28607

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

PT-2023-21843

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.169 Description The issue allows for XSS via the event-graph relationship tooltip in the js/event-graph.js file. Recommendations For versions prior to 2.4.169, update to version 2.4.169 or later to resolve the issue...

CVE-2023-28606

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

CVE-2022-29847

creationtimestamp| type| source ---|---|--- 2023-03-17 21:59:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgoldcredentialdump.rb 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2022-43707

creationtimestamp| type| source ---|---|--- 2023-03-16 11:15:01+00:00| seen| MISP/fc233a3d-51a7-48a0-a25a-637324062854...

CVE-2023-25280

creationtimestamp| type| source ---|---|--- 2023-03-16 06:30:37+00:00| seen| https://t.me/cibsecurity/60112 2024-09-30 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-02-23 02:10:59+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-06-15 21:02:20+00:00| seen|...

CVE-2023-27240

creationtimestamp| type| source ---|---|--- 2023-03-15 11:24:41+00:00| seen| https://t.me/cibsecurity/60043 2025-08-31 03:12:57+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2023-26360

creationtimestamp| type| source ---|---|--- 2023-03-15 07:54:44+00:00| exploited| https://t.me/kasperskyb2b/516 2023-03-16 06:41:59+00:00| exploited| https://t.me/KomunitiSiber/65 2023-03-16 06:47:18+00:00| exploited| https://t.me/thehackernews/3153 2023-04-04 15:51:44+00:00| seen|...

CVE-2023-24880

creationtimestamp| type| source ---|---|--- 2023-03-14 18:19:43+00:00| seen| https://t.me/alexmakus/4936 2023-03-14 22:26:45+00:00| seen| https://t.me/ctinow/99045 2023-03-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=989 2023-03-15 07:54:44+00:00| exploited|...

CVE-2023-23397

creationtimestamp| type| source ---|---|--- 2023-03-14 12:00:00+00:00| seen| https://msrc.microsoft.com/blog/2023/03/microsoft-mitigates-outlook-elevation-of-privilege-vulnerability/ 2023-03-14 18:19:43+00:00| seen| https://t.me/alexmakus/4936 2023-03-14 19:23:27+00:00| seen|...

CVE-2023-27532

creationtimestamp| type| source ---|---|--- 2023-03-10 07:02:05+00:00| seen| https://t.me/ctinow/98243 2023-03-10 14:00:08+00:00| seen| https://t.me/truesecator/4153 2023-03-13 09:03:22+00:00| seen| https://t.me/kasperskyb2b/511 2023-03-23 13:49:43+00:00| published-proof-of-concept|...

CVE-2022-41328

creationtimestamp| type| source ---|---|--- 2023-03-07 20:23:36+00:00| seen| https://t.me/cibsecurity/59597 2023-03-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=983 2023-03-14 07:05:01+00:00| exploited| https://t.me/thehackernews/3145 2023-03-14 12:25:07+00:00|...

CVE-2019-8720

creationtimestamp| type| source ---|---|--- 2023-03-07 02:13:24+00:00| seen| https://t.me/cibsecurity/59535 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:01+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971552 2025-02-23 02:10:25+00:00|...

CVE-2020-14308

creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...

CVE-2020-14309

creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...

CVE-2020-14310

creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...

CVE-2020-15706

creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...

CVE-2020-15707

creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...