CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2021/07/30 3:15 p.m.•14 views

CVE-2021-37743

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format...

5.4CVSS5.8AI score

SaveExploits0References1

Prion•added 2021/07/30 3:15 p.m.•18 views

Cross site scripting

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format...

3.5CVSS5.2AI score0.00677EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2021/01/19 3:29 p.m.•28 views

CVE-2021-25325

MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...

6.1AI score0.00798EPSS

SaveExploits0References1

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by