CVE-2020-10247

MISP 2.4.122 has Persistent XSS in the sighting popover tool. This is related to app/View/Elements/Events/View/sightingfield.ctp...

Design/Logic Flaw

MISP 2.4.122 has Persistent XSS in the sighting popover tool. This is related to app/View/Elements/Events/View/sightingfield.ctp...

CVE-2020-10247

MISP 2.4.122 has Persistent XSS in the sighting popover tool. This is related to app/View/Elements/Events/View/sightingfield.ctp...

CVE-2020-10247

Vulnerability: CVE-2020-10247 affects MISP 2.4.122, where a Persistent XSS exists in the sighting popover tool (file app/View/Elements/Events/View/sighting_field.ctp). Impact: can store/trigger XSS in user-visible popovers. Root cause: persistent cross-site scripting in the sighting_field.ctp com...

PT-2020-12003 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.122 Description: The issue is related to a Persistent XSS in the sighting popover tool, specifically in the app/View/Elements/Events/View/sighting field.ctp file. Recommendations: For MISP version 2.4.122, consider disabling...

CVE-2019-1892

creationtimestamp| type| source ---|---|--- 2019-07-06 04:59:53+00:00| seen| https://t.me/cveNotify/272...

CVE-2019-0951

creationtimestamp| type| source ---|---|--- 2019-05-16 19:50:33+00:00| seen| https://t.me/cvemitreorg/5...

CVE-2018-8584

creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402 2019-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46104...

CVE-2018-15745

creationtimestamp| type| source ---|---|--- 2018-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45296 2025-01-31 22:05:36+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/argusdvr4lficve201815745.rb 2025-02-01 23:08:24+00:00|...

CVE-2017-15216

MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...

CVE-2017-15216

MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...

CVE-2017-8620

creationtimestamp| type| source ---|---|--- 2017-08-09 08:03:09+00:00| seen| https://t.me/BleepingComputer/1550 2017-08-09 13:36:25+00:00| seen| https://t.me/informationsecuritychannel/7483 2017-08-09 16:49:18+00:00| seen| https://t.me/informationsecuritychannel/7492 2017-08-09 18:00:14+00:00|...

CVE-2015-6835

creationtimestamp| type| source ---|---|--- 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38123 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2006-4777

creationtimestamp| type| source ---|---|--- 2010-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16506 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms06067keyframe.rb 2025-02-06 03:13:38+00:00|...