CVE-2016-8562

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:26+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971312 2025-02-23 02:10:12+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2023-28607

js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip...

CVE-2023-28606

js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips...

CVE-2020-14309

creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...

CVE-2022-48328

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...

CVE-2022-48329

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...

PT-2023-19388

Name of the Vulnerable Software and Affected Versions MISP versions 2.4.167 and earlier Description The issue is related to an XSS in authkey add via a Referer field in the app/View/AuthKeys/authkey display.ctp file. Recommendations For MISP versions 2.4.167 and earlier, as a temporary workaround...

Cross site scripting

In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...

PT-2023-19368 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.167 Description: The issue allows for XSS via a network history name in the app/webroot/js/action table.js file. Recommendations: For MISP version 2.4.167, consider disabling the action table.js script until a patch is...

Vulnerability fixed in MISP

A vulnerability has been fixed in MISP. The vulnerability allows an authenticated malicious person to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application being visited. CIRCL has released an...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2022-24637

creationtimestamp| type| source ---|---|--- 2022-08-29 11:37:02+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6693 2022-08-31 14:31:06+00:00| published-proof-of-concept| https://t.me/MrVGunz/448 2022-09-01 15:39:43+00:00| published-proof-of-concept|...

CVE-2021-35064

creationtimestamp| type| source ---|---|--- 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2025-10-12 06:46:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-35064.yaml 2025-10-13 21:02:40+00:00| seen|...

CVE-2022-29806

creationtimestamp| type| source ---|---|--- 2022-04-26 07:50:55+00:00| seen| https://t.me/cibsecurity/41422 2022-05-04 22:56:15+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminderlangexec.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2022-29528

An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...

CVE-2022-29528

An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerabilities exist in versions of MISP prior to 2.4.158,...

PT-2022-19678 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.158 Description: An issue was discovered in MISP where PHAR deserialization can occur. Recommendations: For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue...

CVE-2022-23797

creationtimestamp| type| source ---|---|--- 2022-03-30 20:12:36+00:00| seen| https://t.me/cibsecurity/39836 2022-06-08 22:37:39+00:00| seen| Telegram/dfsIutVBngnoSii1jXUSiug3m6zGnL2dk74uHOjq2I 2024-11-07 10:07:47+00:00| seen| MISP/72776593-904e-4e1c-84ee-51a98432ae8b...