129 matches found
CVE-2026-61474 MISP: Improper sharing group authorization check when adding attributes
An improper authorization check in MISP’s attribute creation endpoint allowed an authenticated user with permission to add attributes to submit a sharinggroupid without triggering the corresponding sharing group authorization check, as long as the attribute distribution value was not explicitly s...
CVE-2025-66384
app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmpname...
EUVD-2018-20556
Malware in sbrugna...
EUVD-2020-29735
Malware in sbrugna...
EUVD-2021-24224
Malware in sbrugna...
EUVD-2019-9000
Malware in sbrugna...
EUVD-2017-5840
Malware in sbrugna...
EUVD-2024-54331
Malicious code in bioql PyPI...
EUVD-2024-53869
Malicious code in bioql PyPI...
EUVD-2022-31755
Malicious code in bioql PyPI...
CVE-2025-6831
creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:23+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:38+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...
CVE-2021-25323
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
CVE-2020-8891
An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests...
CVE-2020-15411
An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...
CVE-2019-10254
In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability...
CVE-2025-24993
creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:09:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144902283889820 2025-03-11 17:39:51+00:00| seen|...
CVE-2024-57969
app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search...
CVE-2018-100000
creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:02+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...
CVE-2009-0086
creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:39+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:35+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...
CVE-2024-21140
creationtimestamp| type| source ---|---|--- 2024-10-25 14:06:49+00:00| seen| MISP/e5a07c99-4da6-4e41-af05-09ab2f705a5f...