CVE-2020-10173

creationtimestamp| type| source ---|---|--- 2020-10-09 13:24:39+00:00| seen| MISP/b14f5ca4-fb33-4da3-ad29-dcaf9e3d3fc4 2020-10-09 13:36:15+00:00| seen| MISP/e439b884-82c9-422e-bee5-4425a48da4c3 2020-10-09 13:38:17+00:00| seen| MISP/401eb7d4-9864-4e3e-bdd7-6243b90979c8 2026-03-18 00:00:00+00:00|...

CVE-2020-25766

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

CVE-2020-9839

creationtimestamp| type| source ---|---|--- 2020-09-04 21:04:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/cfprefsdracecondition.rb 2020-09-08 11:12:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1712 2025-02-06...

Design/Logic Flaw

An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...

CVE-2020-15412

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

CVE-2020-7352

creationtimestamp| type| source ---|---|--- 2020-06-15 14:42:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/goggalaxyclientserviceprivesc.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2020-13153

app/View/Events/resolvedattributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view...

CVE-2020-12856

creationtimestamp| type| source ---|---|--- 2020-05-18 08:46:52+00:00| seen| MISP/5ec24b64-3014-4fa2-9b9e-12cf44b7dd05 2020-09-22 21:46:02+00:00| published-proof-of-concept| https://t.me/androidMalware/876 2026-08-02 14:25:40+00:00| published-proof-of-concept| https://t.me/hackersmeet0/1793...

CVE-2020-10198

creationtimestamp| type| source ---|---|--- 2020-04-20 21:16:00+00:00| seen| MISP/900fbe46-8598-42ef-9a36-51739019e010 2020-04-20 21:16:58+00:00| seen| MISP/86efb74f-bd24-48f7-98b0-08d9ce5010e7 2020-10-09 14:05:30+00:00| seen| MISP/dff0a117-d14d-49e3-b750-205c67dd975a...

CVE-2020-8893

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp...

Design/Logic Flaw

An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php...

Code injection

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp...

CVE-2020-8892

An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-force series of invalid requests...

CVE-2019-18426

creationtimestamp| type| source ---|---|--- 2020-02-04 21:30:02+00:00| seen| https://t.me/thehackernews/592 2020-02-04 23:18:44+00:00| seen| https://t.me/antichat/7809 2020-02-05 17:54:24+00:00| published-proof-of-concept| https://t.me/alexmakus/3268 2020-02-06 19:23:37+00:00|...

CVE-2020-0601

creationtimestamp| type| source ---|---|--- 2020-01-14 07:00:00+00:00| seen| https://msrc.microsoft.com/blog/2020/01/january-2020-security-updates-cve-2020-0601/ 2020-01-14 18:44:30+00:00| seen| https://t.me/alexmakus/3235 2020-01-14 19:15:15+00:00| seen| https://t.me/antichat/7636 2020-01-14...

CVE-2019-19379

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

CVE-2019-1579

creationtimestamp| type| source ---|---|--- 2019-09-12 08:39:42+00:00| published-proof-of-concept| https://t.me/antichat/6508 2019-09-12 10:32:06+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5882 2020-02-18 16:19:32+00:00| exploited| https://t.me/thehackernews/604 2020-02-27...

CVE-2019-1215

creationtimestamp| type| source ---|---|--- 2019-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=419 2019-09-11 09:05:12+00:00| seen| https://t.me/informationsecuritychannel/30889 2019-09-11 18:29:45+00:00| seen| https://t.me/techb0ltGenona/970 2019-09-12...

CVE-2016-4444

creationtimestamp| type| source ---|---|--- 2019-08-02 07:51:35+00:00| seen| MISP/5d43eb5f-8f68-478d-ac49-08ec0a00020f...

CVE-2019-0752

creationtimestamp| type| source ---|---|--- 2019-07-18 14:16:29+00:00| seen| MISP/5d307d92-3514-4a9b-9840-0a540a950b0c 2019-08-11 10:22:59+00:00| published-proof-of-concept| https://t.me/ExcreamOnSecurity/238 2019-11-08 10:03:52+00:00| seen| MISP/5dc53d64-eef8-4ee2-bb5c-4b240a3b4631 2019-11-08...