4 matches found
CVE-2026-111159
A flaw was found in libewf. An attacker could exploit this vulnerability by convincing a user to process a specially crafted file with oversized extended attribute metadata. Due to improper size validation, the library performs an out-of-bounds memory read, which can cause the application to cras...
CVE-2026-77710
A vulnerability in misp-stix could allow a crafted STIX document to influence security-sensitive MISP attribute metadata during import. The STIX import logic automatically selected between the internal MISP parser and the external STIX parser based on metadata contained in the STIX document itsel...
CVE-2026-77710: Improper Input Validation
A vulnerability in misp-stix could allow a crafted STIX document to influence security-sensitive MISP attribute metadata during import. The STIX import logic automatically selected between the internal MISP parser and the external STIX parser based on metadata contained in the STIX document itsel...
CVE-2020-14969
app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute...