CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2021/07/30 3:15 p.m.•16 views

CVE-2021-37743

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format...

5.4CVSS5.8AI score

SaveExploits0References1

Prion•added 2021/07/30 3:15 p.m.•23 views

Cross site scripting

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format...

3.5CVSS5.2AI score0.00677EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2021/01/19 3:29 p.m.•34 views

CVE-2021-25325

MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...

6.1AI score0.00798EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2021/01/19 12:00 a.m.•3 views

CVE-2021-25325: Improper Neutralization of Input During Web Page Generation

MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...

6.1CVSS5.7AI score0.00798EPSS

SaveExploits0References4

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by