5403 matches found
MISP ACL Check Missing Vulnerability
MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. An ACL checking deficiency vulnerability exists in MISP versions prior to 2.4.135 related to...
CVE-2020-26124
creationtimestamp| type| source ---|---|--- 2020-11-24 19:51:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/openmediavaultrpcrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:26+00:00| seen|...
CVE-2020-29006
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php...
CVE-2020-29006
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php...
Information disclosure
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php...
CVE-2020-29006
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php...
CVE-2020-29006
The CVE-2020-29006 issue affects MISP before 2.4.135, due to missing ACL checks in GalaxyElementsController.php and GalaxyElement.php. The vulnerability enables improper access control, with CVSS v3.1: Network, Privileges NONE, UI NONE, Scope UNCHANGED, Impact HIGH on Confidentiality, Integrity, ...
CVE-2020-4006
creationtimestamp| type| source ---|---|--- 2020-11-24 00:46:21+00:00| seen| https://t.me/cibsecurity/16761 2020-11-24 06:05:07+00:00| seen| https://t.me/cKure/2959 2020-11-24 08:29:30+00:00| seen| https://t.me/thehackernews/906 2020-11-26 00:48:50+00:00| published-proof-of-concept|...
MISP 安全漏洞
MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. An ACL checking deficiency vulnerability exists in MISP versions prior to 2.4.135 related to...
CVE-2020-4005
creationtimestamp| type| source ---|---|--- 2020-11-20 22:43:03+00:00| seen| https://t.me/cibsecurity/16681 2020-11-23 12:28:43+00:00| seen| https://t.me/CyberGovIL/946 2020-11-23 12:30:01+00:00| seen|...
CVE-2020-4004
creationtimestamp| type| source ---|---|--- 2020-11-20 22:42:59+00:00| seen| https://t.me/cibsecurity/16678 2020-11-20 22:43:03+00:00| seen| https://t.me/cibsecurity/16681 2020-11-23 12:28:43+00:00| seen| https://t.me/CyberGovIL/946 2020-11-23 12:30:01+00:00| seen|...
CVE-2020-13671
creationtimestamp| type| source ---|---|--- 2020-11-20 18:42:49+00:00| seen| https://t.me/cibsecurity/16662 2020-11-20 18:45:49+00:00| seen| https://t.me/cKure/2918 2020-12-09 07:25:06+00:00| seen| https://t.me/cibsecurity/17408 2023-06-14 21:10:04+00:00| seen|...
CVE-2020-12029
creationtimestamp| type| source ---|---|--- 2020-11-20 13:57:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/rockwellfactorytalkrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00|...
CVE-2020-12027
creationtimestamp| type| source ---|---|--- 2020-11-20 13:57:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/rockwellfactorytalkrce.rb 2022-06-24 15:20:09+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1469...
CVE-2020-12028
creationtimestamp| type| source ---|---|--- 2020-11-20 13:57:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/rockwellfactorytalkrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00|...
Vulnerability fixed in MISP
CIRCL has fixed a vulnerability in MISP. The vulnerability is located in the handling of templates and allows a malicious party to be able to launch a Cross-Site-Scripting attack XSS attack, potentially executing arbitrary code in the context of the browser. CIRCL has released updates to fix the...
MISP Cross-Site Scripting Vulnerability (CNVD-2020-66576)
MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in the template element index view in MISP 2.4.134. The...
CVE-2020-28947
In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled...