CVE-2021-36212

CVE-2021-36212 affects MISP prior to version 2.4.146, with stored XSS in the file path app/View/SharingGroups/view.ctp affecting the sharing groups view. The NVD/CVE data show a CVSSv3.1 base score of 6.1 (NETWORK, LOW attack complexity, UI REQUIRED, CHANGED scope; Impact: LOW confidentiality/int...

CVE-2021-36212

app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view...

Vulnerability fixed in MISP

A vulnerability has been fixed in MISP. An unauthenticated remote malicious person could exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application. The developers have...

CVE-2021-30116

creationtimestamp| type| source ---|---|--- 2021-07-05 10:55:17+00:00| exploited| https://t.me/truesecator/1884 2021-07-05 13:46:20+00:00| exploited| https://t.me/CyberSecurityIL/4145 2021-07-06 18:02:59+00:00| exploited| https://t.me/cibsecurity/25930 2021-07-12 12:51:43+00:00| exploited|...

CVE-2021-34527

creationtimestamp| type| source ---|---|--- 2021-07-01 09:58:27+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus19/2021 2021-07-02 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=605 2021-07-02 07:44:31+00:00| exploited| https://t.me/thehackernews/1333...

CVE-2021-36958

creationtimestamp| type| source ---|---|--- 2021-07-01 09:58:27+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus19/2021 2021-08-12 08:24:57+00:00| seen| https://t.me/thehackernews/1435 2021-08-12 10:25:12+00:00| seen| https://t.me/BleepingComputer/10305 2021-08-12...

CVE-2021-35941

creationtimestamp| type| source ---|---|--- 2021-06-30 09:10:02+00:00| exploited| https://t.me/SecLabNews/10479 2024-11-14 06:09:09+00:00| seen| MISP/77e2575f-4cc0-4fca-b80d-42378757e3d2 2026-06-19 12:48:06+00:00| exploited|...

CVE-2020-15368

creationtimestamp| type| source ---|---|--- 2021-06-30 07:03:28+00:00| published-proof-of-concept| https://t.me/orderofsixangles/1482 2021-07-01 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3736 2021-07-30 07:56:22+00:00| published-proof-of-concept|...

CVE-2021-1675

creationtimestamp| type| source ---|---|--- 2021-06-29 16:49:28+00:00| exploited| https://t.me/truesecator/1866 2021-06-29 17:45:58+00:00| published-proof-of-concept| https://t.me/antichat/9768 2021-06-29 19:16:26+00:00| seen| https://t.me/ctinow/36051 2021-06-30 10:31:32+00:00|...

CVE-2021-35464

creationtimestamp| type| source ---|---|--- 2021-06-29 13:17:30+00:00| published-proof-of-concept| https://t.me/ptswarm/49 2021-07-01 13:37:04+00:00| seen| https://t.me/bhhub/416 2021-07-09 22:09:37+00:00| seen|...

CVE-2021-27850

creationtimestamp| type| source ---|---|--- 2021-06-26 13:47:51+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3694 2021-06-29 17:44:18+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6744 2021-07-01 11:03:01+00:00| seen|...

CVE-2021-35502

app/View/Elements/genericElements/IndexTable/Fields/genericfield.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index...

CVE-2021-35502

app/View/Elements/genericElements/IndexTable/Fields/genericfield.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index...

Design/Logic Flaw

app/View/Elements/genericElements/IndexTable/Fields/genericfield.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index...

CVE-2021-35502

CVE-2021-35502 affects MISP 2.4.144 where the file app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp does not sanitize data related to generic-template:index. The issue is a data-sanitization flaw in a view component; NVD/NCSC/Red Hat records list this as a high-severity vulne...

CVE-2021-35502

app/View/Elements/genericElements/IndexTable/Fields/genericfield.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index...

CVE-2018-18472

creationtimestamp| type| source ---|---|--- 2021-06-25 15:30:14+00:00| seen| https://t.me/deeptoweb/1730 2021-06-27 16:24:46+00:00| seen| https://t.me/CyberGovIL/1284 2021-06-28 12:30:04+00:00| exploited| https://t.me/SecLabNews/10467 2021-06-30 09:10:02+00:00| exploited|...

CVE-2021-32537

creationtimestamp| type| source ---|---|--- 2021-06-25 11:59:51+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3691 2021-08-26 07:07:10+00:00| seen| MISP/bd0c98e8-03b5-4598-b483-a78e01fda7fe 2021-09-18 23:06:09+00:00| published-proof-of-concept|...

CVE-2021-21809

creationtimestamp| type| source ---|---|--- 2021-06-24 02:17:50+00:00| seen| https://t.me/cibsecurity/25663 2021-10-11 22:36:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/moodlespellingpathrce.rb 2021-10-13 01:55:36+00:00| seen|...

CVE-2021-20019

creationtimestamp| type| source ---|---|--- 2021-06-23 07:27:05+00:00| exploited| https://t.me/thehackernews/1308 2021-06-23 13:33:33+00:00| seen| https://t.me/truesecator/1842 2021-06-23 16:46:36+00:00| seen| Telegram/zR-eo4wPLc-hYA3qQx9nAUyHsr4JGFEBCHt2Z3c7PDGJOA 2021-06-23 20:35:12+00:00| seen...