5403 matches found
CVE-2019-11813
CVE-2019-11813 applies to MISP before 2.4.107, affecting the view component app/View/Elements/Events/View/value_field.ctp. The issue is a persistent XSS via link type attributes using javascript:// links, enabling potentially scripted payloads in affected installations. Root cause is improper han...
CVE-2019-11812
A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link...
CVE-2019-11812
CVE-2019-11812 is a persistent XSS in MISP prior to 2.4.107. The vulnerability is in the PHP component app/View/Helper/CommandHelper.php, where JavaScript can be injected via the discussion interface and triggered by clicking a link. Affected product/version: MISP (before 2.4.107). Root cause is ...
CVE-2019-9193
creationtimestamp| type| source ---|---|--- 2019-05-07 06:24:23+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/postgres/postgrescopyfromprogramcmdexec.rb 2019-05-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46813 2020-12-17...
CVE-2019-3395
creationtimestamp| type| source ---|---|--- 2019-05-05 19:20:03+00:00| seen| MISP/5ccf3134-ea64-43c1-a356-f9f3950d210f...
CVE-2019-1003033
creationtimestamp| type| source ---|---|--- 2019-05-05 19:20:03+00:00| seen| MISP/5ccf3134-ea64-43c1-a356-f9f3950d210f...
CVE-2019-1003030
creationtimestamp| type| source ---|---|--- 2019-05-05 19:20:03+00:00| seen| MISP/5ccf3134-ea64-43c1-a356-f9f3950d210f 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 00:03:17+00:00| seen| https://t.me/arpsyndicate/1064 2023-12-11 12:54:13+00:00| seen|...
CVE-2019-10123
creationtimestamp| type| source ---|---|--- 2019-04-29 19:13:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/aiseselserverrce.rb 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46782 2025-02-06 03:13:43+00:00| seen...
CVE-2019-10867
creationtimestamp| type| source ---|---|--- 2019-04-29 14:02:32+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/pimcoreunserializerce.rb 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46783 2024-11-14 06:10:01+00:00|...
CVE-2019-3799
creationtimestamp| type| source ---|---|--- 2019-04-26 14:45:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/springcloudtraversal.rb 2023-11-02 13:56:07+00:00| published-proof-of-concept| https://t.me/CNArsenal/1418 2023-11-02...
CVE-2019-8565
creationtimestamp| type| source ---|---|--- 2019-04-22 16:59:51+00:00| published-proof-of-concept| https://t.me/antichat/4586 2019-05-20 18:21:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/feedbackassistantroot.rb 2019-05-23 00:00:00+00:00|...
CVE-2019-5782
creationtimestamp| type| source ---|---|--- 2019-04-21 13:32:51+00:00| published-proof-of-concept| https://t.me/antichat/4560 2019-04-21 15:20:28+00:00| published-proof-of-concept| https://t.me/br0wsec/89 2020-10-19 15:18:03+00:00| seen| MISP/6e6279eb-5465-4abc-9907-cbb2e25fca46 2020-10-19...
CVE-2019-10692
creationtimestamp| type| source ---|---|--- 2019-04-15 12:48:29+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/wpgooglemapssqli.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:11+00:00| seen|...
CVE-2019-11447
creationtimestamp| type| source ---|---|--- 2019-04-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46698 2020-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48800 2024-11-14 06:07:03+00:00| seen| MISP/e0a2986c-7c54-4933-95c6-841854d50e7f...
CVE-2019-8513
creationtimestamp| type| source ---|---|--- 2019-04-13 18:51:06+00:00| published-proof-of-concept| https://t.me/antichat/4432 2019-04-13 20:10:59+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5400 2019-06-29 10:52:23+00:00| seen|...
CVE-2019-0803
creationtimestamp| type| source ---|---|--- 2019-04-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=378 2019-04-10 12:26:05+00:00| exploited| https://t.me/CyberGovIL/413 2019-05-18 21:08:21+00:00| published-proof-of-concept| https://t.me/antichat/4994 2019-05-20...
CVE-2019-0859
creationtimestamp| type| source ---|---|--- 2019-04-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=378 2019-04-10 12:26:05+00:00| exploited| https://t.me/CyberGovIL/413 2019-04-15 12:12:05+00:00| seen| https://t.me/ctinow/10341 2019-04-15 23:07:12+00:00| seen|...
CVE-2019-9858
creationtimestamp| type| source ---|---|--- 2019-04-09 19:04:19+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/hordeformfileupload.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:20+00:00| seen|...
CVE-2019-8506
creationtimestamp| type| source ---|---|--- 2019-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46647 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 02:28:16+00:00| seen| https://t.me/arpsyndicate/1092 2024-12-24 20:30:53+00:00| seen|...
