CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2021/07/30 12:00 a.m.•4 views

CVE-2021-37743: Improper Neutralization of Input During Web Page Generation

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format...

5.4CVSS5.7AI score0.00677EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2021/01/19 12:00 a.m.•4 views

CVE-2021-25325: Improper Neutralization of Input During Web Page Generation

MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...

6.1CVSS5.7AI score0.00798EPSS

SaveExploits0References4

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by