5637 matches found
CVE-2020-14311
creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...
CVE-2020-14310
creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...
CVE-2020-14309
creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...
CVE-2020-15706
creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...
CVE-2020-15707
creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...
CVE-2020-14308
creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...
CVE-2023-27372
creationtimestamp| type| source ---|---|--- 2023-02-28 22:32:44+00:00| seen| https://t.me/cibsecurity/59155 2023-06-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51536 2023-06-22 05:41:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8529 2023-06-23...
CVE-2020-7851
creationtimestamp| type| source ---|---|--- 2023-02-28 10:06:47+00:00| seen| MISP/7d2290fd-bed6-4075-9661-494056ff3eca 2026-02-06 22:53:02+00:00| seen| MISP/7d2290fd-bed6-4075-9661-494056ff3eca...
CVE-2022-41223
creationtimestamp| type| source ---|---|--- 2023-02-22 06:49:53+00:00| exploited| https://t.me/thehackernews/3079 2023-02-22 12:24:29+00:00| seen| Telegram/2I9R6FliHquwURRb8t5QNFGxrnLnYILqhcQxv35YCmjG 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24...
CVE-2022-48328
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...
CVE-2022-48329
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...
CVE-2022-48328
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...
Code injection
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...
Design/Logic Flaw
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...
CVE-2022-48328
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...
CVE-2022-48329
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...
CVE-2022-48328
CVE-2022-48328 affects MISP prior to 2.4.167, where the file app/Controller/Component/IndexFilterComponent.php mishandles ordered_url_params and additional_delimiters. The consolidated sources (NVD, Red Hat, OSV, etc.) identify this as a vulnerability with a critical CVSS v3.1 base score of 9.8 (...
CVE-2022-48329
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...
CVE-2022-48329
CVE-2022-48329 affects MISP before 2.4.166, where the order parameter can be used insecurely. The vulnerability relates to specific PHP components: app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php. It has a CV...
CVE-2022-48329
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...