312 matches found
CVE-2020-28043
MISP through 2.4.133 allows SSRF in the REST client via the usefullpath parameter with an arbitrary URL...
CVE-2014-4322
creationtimestamp| type| source ---|---|--- 2020-10-09 17:31:14+00:00| seen| MISP/e30bc96e-a2cd-4e46-8c16-cdd2ff57f9d3 2025-08-31 03:01:10+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
MISP Link Jumping Vulnerability
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.132. The vulnerability stems...
CVE-2020-25766
An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...
Design/Logic Flaw
In MISP before 2.4.129, setting a favourite homepage was not CSRF protected...
CVE-2019-10068
creationtimestamp| type| source ---|---|--- 2020-05-06 14:27:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/kenticostagingsyncserver.rb 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 08:03:59+00:00|...
CVE-2020-4429
creationtimestamp| type| source ---|---|--- 2020-05-05 17:17:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/ibmdrmdownload.rb 2020-05-05 17:17:40+00:00| seen|...
MISP Information Disclosure Vulnerability (CNVD-2020-23173)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in the app/Model/feed.php file in versions of MISP prior t...
Unspecified vulnerability in MISP (CNVD-2020-18630)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP suffers from an unspecified vulnerability that stems from the program not taking HTTP...
CVE-2019-8733
creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:11:25+00:00| seen| https://t.me/ctinow/208528 2024-03-15 10:46:32+00:00| seen| https://t.me/ctinow/208611 2024-03-15 10:46:33+00:00| seen| https://t.me/ctinow/20861...
CVE-2019-8719
creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:11:22+00:00| seen| https://t.me/ctinow/208525 2024-03-15 10:16:31+00:00| seen| https://t.me/ctinow/208588 2024-03-15 10:46:29+00:00| seen| https://t.me/ctinow/20860...
CVE-2019-12868
app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP fileexists function is used with user-controlled entries, and phar:// URLs trigger deserialization...
CVE-2019-6527
creationtimestamp| type| source ---|---|--- 2019-02-13 15:31:18+00:00| seen| MISP/5c6437b8-9200-4ca6-9b7b-6fc50a021402...
CVE-2019-6533
creationtimestamp| type| source ---|---|--- 2019-02-13 15:31:18+00:00| seen| MISP/5c6437b8-9200-4ca6-9b7b-6fc50a021402...
CVE-2018-19525
creationtimestamp| type| source ---|---|--- 2019-02-13 14:39:58+00:00| seen| MISP/5c642be4-a6b8-459c-8e3e-6e5b0a021402...
CVE-2019-0615
creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...
CVE-2019-0637
creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...
CVE-2019-0641
creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...