5473 matches found
CVE-2021-2109
creationtimestamp| type| source ---|---|--- 2021-01-20 18:37:43+00:00| seen| https://t.me/cibsecurity/22389 2021-01-24 14:36:01+00:00| seen| https://t.me/CyberSecurityTechnologies/2562 2021-02-07 20:56:01+00:00| published-proof-of-concept| https://t.me/reconshell/420 2021-08-09 11:06:06+00:00|...
CVE-2020-23522
creationtimestamp| type| source ---|---|--- 2021-01-19 16:55:59+00:00| seen| https://t.me/cibsecurity/22258 2021-05-31 03:55:03+00:00| seen| https://t.me/pwnwikizhchannel/553 2024-11-14 06:08:14+00:00| seen| MISP/099a7f3f-a9c7-40b7-ba9b-5e5e0a42542e...
CVE-2021-25325
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
CVE-2021-3184
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...
CVE-2021-25325
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
CVE-2021-25323
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
CVE-2021-3184
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...
CVE-2021-25324
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...
CVE-2021-25323
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
CVE-2021-25324
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...
Cross site scripting
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...
Design/Logic Flaw
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...
Design/Logic Flaw
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
Default credentials
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
CVE-2021-3184
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...
CVE-2021-3184
MISP 2.4.136 is affected by a Cross-Site Scripting (XSS) vulnerability that arises from a crafted URL targeting the app/View/Elements/global_menu.ctp on the user homepage favourites button. The issue is documented across multiple sources and is confirmed by connected records describing a vulnerab...
CVE-2021-25323
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
CVE-2021-25323
The CVE-2021-25323 issue concerns MISP version 2.4.136 where the default configuration did not require the current password (require_password_confirmation) when changing a password. Root cause: the default setting omits verification of the existing password during password changes. Impact: elevat...
CVE-2021-25324
CVE-2021-25324 affects MISP 2.4.136 with a Stored XSS flaw in the galaxy cluster view (app/View/GalaxyClusters/view.ctp). Root cause details are not fully disclosed in the provided documents, but the vulnerability is described by multiple sources as a cross-site scripting issue that could impact ...